TI-2024-28448 CVE-2024-42480 · GHSA-6r4j-4rjc-8vw5
Kamaji's RBAC Roles for `etcd` are not disjunct
Priority HIGH 76
Kamaji is the Hosted Control Plane Manager for Kubernetes.
clastix
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
clastix records in CISA KEVNo clastix vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2022-07704 CVE-2022-23652 · GHSA-9cwv-cppx-mqjm
Privilege escalation using hop-by-hop Connection header
Priority HIGH 73
capsule-proxy is a reverse proxy for Capsule Operator which provides multi-tenancy in Kubernetes.
TI-2026-44467 CVE-2026-62246
Improper access control in clastix kamaji
Priority HIGH 72
Kamaji is the Hosted Control Plane Manager for Kubernetes.
TI-2026-44925 CVE-2026-62845
Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers
Priority MEDIUM 55
Kamaji is the Hosted Control Plane Manager for Kubernetes.
TI-2023-26175 CVE-2023-48312 · GHSA-fpvw-6m5v-hqfp
Authentication bypass using an empty token in capsule-proxy
Priority MEDIUM 43
capsule-proxy is a reverse proxy for the capsule operator project.
TI-2022-22811 CVE-2022-46167 · GHSA-x45c-cvp8-q4fm
Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace
Priority MEDIUM 42
Capsule is a multi-tenancy and policy-based framework for Kubernetes.
TI-2023-24881 CVE-2023-46254 · GHSA-6758-979h-249x
Service accounts can see namespaces of other tenants in capsule-proxy
Priority LOW 21
capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework.