https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:55:15 +0000 https://cve.radiocsirt.org/vuln/cve-2024-9779 <p><strong>Affected:</strong> open-cluster-management-io, Red Hat Advanced Cluster Management for Kubernetes 2</p> <p>A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name &#34;cluster-manager&#34; which is bound to a ClusterRole also named &#34;cluster-manager&#34;, which includes the permission to create Pod resources. If this deployment runs a pod on an attacker-controlled node, the attacker can obtain the cluster-manager&#39;s token and steal any service account token by creating and mounting the target service account to control the whole cluster.</p> <p><strong>Affected:</strong> open-cluster-management-io, Red Hat Advanced Cluster Management for Kubernetes 2</p> <p>A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name &#34;cluster-manager&#34; which is bound to a ClusterRole also named &#34;cluster-manager&#34;, which includes the permission to create Pod resources. If this deployment runs a pod on an attacker-controlled node, the attacker can obtain the cluster-manager&#39;s token and steal any service account token by creating and mounting the target service account to control the whole cluster.</p> https://cve.radiocsirt.org/vuln/cve-2024-9779