GHSA-74j8-w7f9-pp62
Improper configuration of RBAC permissions obtaining cluster control permissions
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/labring/sealos | < 4.2.1-rc4 | 4.2.1-rc4 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Summary
Improper configuration of RBAC permissions resulted in obtaining cluster control permissions, which could control the entire cluster deployed with Sealos, as well as hundreds of pods and other resources within the cluster.
### Details
detail's is disable by publish.
### PoC
detail's is disable by publish.
### Impact
+ sealos public cloud user
+ CWE-287 Improper Authentication
References
External links from the advisory. They lead to third-party sites.