[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2024-5042":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":25,"references":27,"score":41,"epss_score":42,"epss_percentile":43,"is_kev":44,"cisa_kev_date_added":45,"cisa_kev_due_date":45,"cisa_ssvc":46,"attack_mappings":56,"exploits":63},34522,"CVE-2024-5042","EUVD-2024-1367","Submariner Operator sets unnecessary RBAC permissions\n\nA flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.","2024-05-17T15:31:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":18,"privilegesRequired":17,"confidentialityImpact":19},"CHANGED","3.1",6.6,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:L\u002FI:H\u002FA:N","HIGH","NONE","LOW",true,[22],"CWE-250",[24],"cpe:2.3:a:submariner-io:submariner-operator:*:*:*:*:*:*:*:*",[26],"Submariner-Io Submariner-Operator",[28,29,30,31,32,33,34,35,36,37,38,39,40],"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2024:4591","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6503","https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2024-5042","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2280921","https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2rhx-qhxp-5jpw","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-5042","https:\u002F\u002Fgithub.com\u002Fsubmariner-io\u002Fsubmariner-operator\u002Fissues\u002F3041","https:\u002F\u002Fgithub.com\u002Fsubmariner-io\u002Fsubmariner-operator\u002Fpull\u002F3040","https:\u002F\u002Fgithub.com\u002Fsubmariner-io\u002Fsubmariner-operator\u002Fpull\u002F3045","https:\u002F\u002Fgithub.com\u002Fsubmariner-io\u002Fsubmariner-operator\u002Fpull\u002F3046","https:\u002F\u002Fgithub.com\u002Fsubmariner-io\u002Fsubmariner-operator\u002Fpull\u002F3049","https:\u002F\u002Fgithub.com\u002Fsubmariner-io\u002Fsubmariner-operator\u002Fcommit\u002Fb27a04c4270e53cbff6ff8ac6245db10c204bcab","https:\u002F\u002Fgithub.com\u002Fsubmariner-io\u002Fsubmariner-operator",0.53,0.00507,0.43003,false,null,{"timestamp":47,"automatable":48,"tech_impact":49,"exploitation":50,"cisa_decision":51,"cisa_remediation_timeline":55},"2024-05-20T14:43:37.969142Z","no","total","none",{"vector":52,"decision":53,"priority":54},"CISAv1\u002FE:N\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-25T16:08:10.466306\u002F","track_star","medium","14D",[57],{"name":58,"source":59,"tactics":60,"technique_id":62},"Exploit Public-Facing Application","attack_vector",[61],"initial-access","T1190",[]]