Capsule vulnerabilities

2 known vulnerabilities in Capsule from Clastix. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  capsule: Incorrect Authorization

  CVE-2024-39690Aug 20, 2024Projectcapsule

  Capsule is a multi-tenancy and policy-based framework for Kubernetes. In Capsule v0.7.0 and earlier, the tenant-owner can patch any arbitrary namespace that has not been taken over by a tenant (i.e., namespaces without the ownerReference field), thereby gainin

• 8.8 High severity

  capsule: Incorrect Authorization

  CVE-2022-46167Dec 2, 2022Clastix

  Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to version 0.1.3, a ServiceAccount deployed in a Tenant Namespace, when granted with `PATCH` capabilities on its own Namespace, is able to edit it and remove the Owner Reference, break