karmada vulnerabilities

2 known vulnerabilities in karmada from Karmada-io. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  karmada: Incorrect Privilege Assignment

  CVE-2024-56513Jan 3, 2025Karmada-io

  Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, the PULL mode clusters registered with the `karmadactl register` command have excessive privil

• 8.4 High severity

  karmada: Improper Access Control

  CVE-2024-33396May 2, 2024Karmada-io

  An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. NOTE: The maintainer states that the behavior is intended design and notes that the researcher advisory does no