Access Control Weakness in Openshift Service Mesh Operator

CVE-2020-14306

What is CVE-2020-14306?

An access control vulnerability has been identified in the Openshift Service Mesh Operator. This flaw permits authenticated users with basic access to deploy customized gateways or pods within any namespace of the cluster. Such an action can potentially lead to the compromise of privileged service account tokens, jeopardizing the confidentiality and integrity of sensitive data. Consequently, this also poses a risk to the overall availability of the system. Remediation is crucial to mitigate any unauthorized access and safeguard data within the infrastructure.

References