Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:35:28 +0000 EUVD-2026-213387 https://cve.radiocsirt.org/vuln/euvd-2026-213387 EUVD-2026-213387 https://cve.radiocsirt.org/vuln/euvd-2026-213387 fkie_cve-2023-2250 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2250 <p>A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registration-controller or cluster-manager deployments. A malicious user can take advantage of this and bind the cluster-admin to any service account or using the service account to list all secrets for all kubernetes namespaces, leading into a cluster-level privilege escalation.</p> <p>A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registration-controller or cluster-manager deployments. A malicious user can take advantage of this and bind the cluster-admin to any service account or using the service account to list all secrets for all kubernetes namespaces, leading into a cluster-level privilege escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-2250 GHSA-hxv8-f44w-4g6h https://cve.radiocsirt.org/vuln/ghsa-hxv8-f44w-4g6h <p>A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registration-controller or cluster-manager deployments. A malicious user can take advantage of this and bind the cluster-admin to any service account or using the service account to list all secrets for all kubernetes namespaces, leading into a cluster-level privilege escalation.</p> <p>A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registration-controller or cluster-manager deployments. A malicious user can take advantage of this and bind the cluster-admin to any service account or using the service account to list all secrets for all kubernetes namespaces, leading into a cluster-level privilege escalation.</p> https://cve.radiocsirt.org/vuln/ghsa-hxv8-f44w-4g6h gsd-2023-2250 https://cve.radiocsirt.org/vuln/gsd-2023-2250 gsd-2023-2250 https://cve.radiocsirt.org/vuln/gsd-2023-2250