Product
critical
advisory
Privilege Escalation in multicloud-operators-subscription
1 TTP 1 CVEA privilege escalation vulnerability in the multicloud-operators-subscription component allows tenants to perform unauthorized resource deployment via the HelmRelease controller.
multicloud-operators-subscription
1t
1c
high
advisory
Information Disclosure in multicloud-operators-subscription via Improper Cross-Namespace Secret Reference
1 TTP 1 CVEA vulnerability in the multicloud-operators-subscription controller allows a namespace administrator to exfiltrate sensitive secret contents by manipulating cross-namespace resource references.
multicloud-operators-subscription
1t
1c