diff --git a/advisories/github-reviewed/2024/05/GHSA-2rhx-qhxp-5jpw/GHSA-2rhx-qhxp-5jpw.json b/advisories/github-reviewed/2024/05/GHSA-2rhx-qhxp-5jpw/GHSA-2rhx-qhxp-5jpw.json index 93cc7ed0227..5858bbd2e22 100644 --- a/advisories/github-reviewed/2024/05/GHSA-2rhx-qhxp-5jpw/GHSA-2rhx-qhxp-5jpw.json +++ b/advisories/github-reviewed/2024/05/GHSA-2rhx-qhxp-5jpw/GHSA-2rhx-qhxp-5jpw.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-2rhx-qhxp-5jpw", - "modified": "2024-07-17T18:31:00Z", + "modified": "2025-01-21T21:38:08Z", "published": "2024-05-17T15:31:10Z", "aliases": [ "CVE-2024-5042" ], - "summary": "Submariner Operator sets unnecessary RBAC permissions in helm charts", + "summary": "Submariner Operator sets unnecessary RBAC permissions", "details": "A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromise other nodes and potentially the entire cluster.", "severity": [ { @@ -25,7 +25,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "0.16.0-m0" }, { "fixed": "0.16.4" @@ -44,10 +44,48 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0.17.0" + "introduced": "0.17.0-m0" }, { - "last_affected": "0.18.0-m3" + "fixed": "0.17.2" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/submariner-io/submariner-operator" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.15.4" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/submariner-io/submariner-operator" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0.18.0-m0" + }, + { + "fixed": "0.18.0-rc0" } ] } @@ -67,6 +105,18 @@ "type": "WEB", "url": "https://github.com/submariner-io/submariner-operator/pull/3040" }, + { + "type": "WEB", + "url": "https://github.com/submariner-io/submariner-operator/pull/3045" + }, + { + "type": "WEB", + "url": "https://github.com/submariner-io/submariner-operator/pull/3046" + }, + { + "type": "WEB", + "url": "https://github.com/submariner-io/submariner-operator/pull/3049" + }, { "type": "WEB", "url": "https://github.com/submariner-io/submariner-operator/commit/b27a04c4270e53cbff6ff8ac6245db10c204bcab" @@ -83,10 +133,6 @@ "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2280921" }, - { - "type": "ADVISORY", - "url": "https://github.com/advisories/GHSA-2rhx-qhxp-5jpw" - }, { "type": "PACKAGE", "url": "https://github.com/submariner-io/submariner-operator"