CyberRota Analysis
AI-GeneratedKubernetes clusters using the Pinniped Supervisor for authentication are vulnerable to privilege escalation if specific conditions are met, including an improperly configured ActiveDirectoryIdentityProvider and the attacker's ability to manipulate group entries in Active Directory. This vulnerability could allow an attacker with knowledge of an AD user's password to gain elevated permissions within the cluster. Organizations utilizing affected versions of Pinniped (v0.11.0 to v0.46.0) should prioritize upgrading to v0.47.0 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially gain elevated permissions in the clusters, only if all the following conditions were true: the Pinniped Supervisor server is running with an ActiveDirectoryIdentityProvider resource configured; the ActiveDirectoryIdentityProvider.spec.groupSearch.attributes.groupName is empty; the attacker gains the ability to edit some part of the distinguished name (DN) of group entries in the Active Directory (AD) server's database for groups to which they belong; the configured group search parameters cause the edited group to be included in the group search results for the user; and the attacker knows the password for an AD user who belongs to the edited AD group. Affected versions: Pinniped (go.pinniped.dev) v0.11.0 through v0.46.0 inclusive; fixed in v0.47.0.