Security Advisory
CVE-2024-36540
9.8
CRITICAL
Vulnerability Description
Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Published Date
July 24, 2024
Official Source
NIST NVD Advisory