Bug 1210218 (CVE-2023-22645) - VUL-0: CVE-2023-22645: kubewarden: Excessive permissions for kubewarden-controller-manager-cluster-role
Summary: VUL-0: CVE-2023-22645: kubewarden: Excessive permissions for kubewarden-contr...
Status: RESOLVED FIXED
Alias: CVE-2023-22645
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/362585/
Whiteboard: CVSSv3.1:SUSE:CVE-2023-22645:8.0:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2023-04-06 12:36 UTC by Marcus Meissner
Modified: 2024-04-19 10:41 UTC (History)
5 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Comment 2 Johannes Segitz 2023-04-06 13:58:30 UTC 
Please use CVE-2023-22645 for this
Comment 4 Víctor Cuadrado Juan 2024-04-19 10:41:44 UTC 
Got awoken by metadata change for the URL field.

Closing as resolved fixed, this was fixed with kubewarden-controller chart version v1.5.0 back in 2023-04-17.