CVE-2024-41820

MediumCVSS 6.0/10Last modified Jun 17, 2026

Description

Kubean is a cluster lifecycle management toolchain based on kubespray and other cluster LCM engine. The ClusterRole has `*` verbs of `*` resources. If a malicious user can access the worker node which has kubean's deployment, he/she can abuse these excessive permissions to do whatever he/she likes to the whole cluster, resulting in a cluster-level privilege escalation. This issue has been addressed in release version 0.18.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Metrics

CVSS 3.1 6.0/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published: Aug 5, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-418246.5In JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build log in some specific cases CVE-2024-418255.4In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab CVE-2024-418264.8In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page CVE-2024-418279.8In JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or expiration CVE-2024-418286.5In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time CVE-2024-418297.5In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection CVE-2024-41836.5Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessi CVE-2024-418307.8Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability th CVE-2024-418317.8Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability th CVE-2024-418325.5Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerabili CVE-2024-418335.5Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerabili CVE-2024-418345.5Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerabili