CVE-2024-36539: Critical severity Contour Contour vulnerability
Published Jul 24, 2024
·Updated
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Affected Software
2 affected components
Contour Contour
projectcontour Contour Kubernetes=1.28.3
Event History
Jul 24, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-36539?
CVE-2024-36539 is rated as a high severity vulnerability due to its potential for privilege escalation and sensitive data exposure.
2
How do I fix CVE-2024-36539?
To mitigate CVE-2024-36539, adjust permissions to ensure service account tokens are secured and not accessible to unauthorized users.
3
What software versions are affected by CVE-2024-36539?
CVE-2024-36539 affects Contour version 1.28.3 specifically.
4
What type of vulnerability is CVE-2024-36539?
CVE-2024-36539 is categorized as a permissions vulnerability that allows unauthorized access and privilege escalation.
5
What can attackers do with CVE-2024-36539?
Attackers exploiting CVE-2024-36539 can access sensitive data and gain elevated privileges by obtaining the service account's token.