https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:16:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-270728 EUVD-2026-270728 https://cve.radiocsirt.org/vuln/euvd-2026-270728 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9779 <p>A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name &#34;cluster-manager&#34; which is bound to a ClusterRole also named &#34;cluster-manager&#34;, which includes the permission to create Pod resources. If this deployment runs a pod on an attacker-controlled node, the attacker can obtain the cluster-manager&#39;s token and steal any service account token by creating and mounting the target service account to control the whole cluster.</p> <p>A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name &#34;cluster-manager&#34; which is bound to a ClusterRole also named &#34;cluster-manager&#34;, which includes the permission to create Pod resources. If this deployment runs a pod on an attacker-controlled node, the attacker can obtain the cluster-manager&#39;s token and steal any service account token by creating and mounting the target service account to control the whole cluster.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-9779 https://cve.radiocsirt.org/vuln/ghsa-jhh6-6fhp-q2xp <p><strong>Affected:</strong> Go: open-cluster-management.io/ocm</p> <p>A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name &#34;cluster-manager&#34; which is bound to a ClusterRole also named &#34;cluster-manager&#34;, which includes the permission to create Pod resources. If this deployment runs a pod on an attacker-controlled node, the attacker can obtain the cluster-manager&#39;s token and steal any service account token by creating and mounting the target service account to control the whole cluster.</p> <p><strong>Affected:</strong> Go: open-cluster-management.io/ocm</p> <p>A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name &#34;cluster-manager&#34; which is bound to a ClusterRole also named &#34;cluster-manager&#34;, which includes the permission to create Pod resources. If this deployment runs a pod on an attacker-controlled node, the attacker can obtain the cluster-manager&#39;s token and steal any service account token by creating and mounting the target service account to control the whole cluster.</p> https://cve.radiocsirt.org/vuln/ghsa-jhh6-6fhp-q2xp https://cve.radiocsirt.org/vuln/opensuse-su-2024:14608-1 <p>govulncheck-vulndb-0.0.20241220T214820-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20241220T214820-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14608-1 https://cve.radiocsirt.org/vuln/suse-su-2025:0060-1 <p>Security update for govulncheck-vulndb</p> <p>Security update for govulncheck-vulndb</p> https://cve.radiocsirt.org/vuln/suse-su-2025:0060-1