Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:hawtio:hawtio-Operator:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Excessive ClusterRole Permissions in hawtio-operator

The hawtio-operator contains an overly permissive ClusterRole configuration that enables an attacker who compromises the operator pod to access all Secrets across the Kubernetes cluster.

hawtio-operator oauth privilege-escalation token-harvesting cloud-security
3t 1c