Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:ibm:observability_with_instana:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Information Disclosure Vulnerability in IBM Instana Agent Operator

IBM Instana Agent Operator versions 1.0.303 through 1.0.323 contain a vulnerability involving missing namespace validation that allows an authenticated attacker to copy sensitive etcd mTLS credentials to an attacker-controlled namespace.

Observability with Instana +1 vulnerability kubernetes openshift credential-access
1t 1c