{"schema_version":"1.3.1","id":"GO-2022-1135","modified":"2024-08-21T16:03:26Z","published":"2024-08-21T16:03:26Z","aliases":["CVE-2022-46167","GHSA-x45c-cvp8-q4fm"],"summary":"Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule","details":"Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule","affected":[{"package":{"name":"github.com/clastix/capsule","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.1.3"}]}],"ecosystem_specific":{}}],"references":[{"type":"ADVISORY","url":"https://github.com/clastix/capsule/security/advisories/GHSA-x45c-cvp8-q4fm"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46167"},{"type":"FIX","url":"https://github.com/clastix/capsule/commit/1df430e71be8c4778c82eca3459978ad7d0b4b7b"},{"type":"FIX","url":"https://github.com/clastix/capsule/commit/75525ac19254b0c5111e34d7985e2be7bc8b1ac1"},{"type":"WEB","url":"https://github.com/clastix/capsule/releases/tag/v0.1.3"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2022-1135","review_status":"UNREVIEWED"}}