VULNERABILITY INTELLIGENCE
CVE-2024-32359
CVSS score6.9 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2024-05-02
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H
Description
An RBAC authorization risk in Carina v0.13.0 and earlier allows local attackers to execute arbitrary code through designed commands to obtain the secrets of the entire cluster and further take over the cluster.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-285