Skip to content
Threat Feed
Subscribe

Product

Observability With Instana (Agent) (1.0.303-1.0.323)

1 brief RSS
high advisory

Information Disclosure Vulnerability in IBM Instana Agent Operator

IBM Instana Agent Operator versions 1.0.303 through 1.0.323 contain a vulnerability involving missing namespace validation that allows an authenticated attacker to copy sensitive etcd mTLS credentials to an attacker-controlled namespace.

Observability with Instana +1 vulnerability kubernetes openshift credential-access
1t 1c