漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Cluster-level privilege escalation in kubean
Vulnerability Description
Kubean is a cluster lifecycle management toolchain based on kubespray and other cluster LCM engine. The ClusterRole has `*` verbs of `*` resources. If a malicious user can access the worker node which has kubean's deployment, he/she can abuse these excessive permissions to do whatever he/she likes to the whole cluster, resulting in a cluster-level privilege escalation. This issue has been addressed in release version 0.18.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
Vulnerability Type
关键资源的不正确权限授予
Vulnerability Title
kubean 安全漏洞
Vulnerability Description
Kubean是kubean-io开源的一个基于 kubespray 和其他集群 LCM 的生产就绪集群生命周期管理工具链。 kubean v0.17.5及之前版本存在安全漏洞，该漏洞源于存在潜在风险，可用于进行集群级权限提升。
CVSS Information
N/A
Vulnerability Type
N/A