NetSight
high8.8

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Impact

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Affected products

VendorProductAffected versions
Kube-LoggingLogging-Operator
Version 4.6.0

Weakness classification

References