critical9.8
CVE-2024-36540
Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Impact
Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| External-Secrets | External Secrets Operator | Version 0.9.16 |