Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:ibm:instana_agent:1.0.303:*:*:*:*:*:*:*

1 brief RSS
critical advisory

IBM Instana Agent Operator RBAC Hijacking Vulnerability

An authenticated tenant can perform privilege escalation in Kubernetes clusters using IBM Instana Agent Operator (Build 1.0.303 through 1.0.323) by creating a malicious Custom Resource that overwrites shared cluster-level RBAC objects.

Instana Agent +1 privilege-escalation kubernetes cloud
1t 1c