Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 15:21:45 +0000 CVE-2024-42480 — Kamaji's RBAC Roles for `etcd` are not disjunct https://cve.radiocsirt.org/vuln/cve-2024-42480 <p><strong>Affected:</strong> clastix kamaji</p> <p>Kamaji is the Hosted Control Plane Manager for Kubernetes. In versions 1.0.0 and earlier, Kamaji uses an &#34;open at the top&#34; range definition in RBAC for etcd roles leading to some TCPs API servers being able to read, write, and delete the data of other control planes. This vulnerability is fixed in edge-24.8.2.</p> <p><strong>Affected:</strong> clastix kamaji</p> <p>Kamaji is the Hosted Control Plane Manager for Kubernetes. In versions 1.0.0 and earlier, Kamaji uses an &#34;open at the top&#34; range definition in RBAC for etcd roles leading to some TCPs API servers being able to read, write, and delete the data of other control planes. This vulnerability is fixed in edge-24.8.2.</p> https://cve.radiocsirt.org/vuln/cve-2024-42480