GitHub Advisoryadvisory · Go
GHSA-c9cm-5j82-m6pj fabedge has insecure permissions
CRITICAL
Official page ↗
- Aliases
- CVE-2024-36536
- Ecosystem
- Go
- Packages
- github.com/fabedge/fabedge
- Severity
- Critical
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-863
- Reviewed
- 2024-08-02
Affected packages
• Go github.com/fabedge/fabedge: <= 0.8.1 (no fix yet)
Description
Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Related
Alias · CVE (1)
- CVE-2024-36536 Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's… vulnerability
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness