Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Datashim allows for privilege escalation and reading arbitrary secrets in any namespace #146

Closed
TobiasGoerke opened this issue Nov 11, 2021 · 1 comment · Fixed by #150
Closed

Datashim allows for privilege escalation and reading arbitrary secrets in any namespace #146

TobiasGoerke opened this issue Nov 11, 2021 · 1 comment · Fixed by #150
Assignees
@srikumar003
Labels
bug Something isn't working

Comments

@TobiasGoerke
Copy link

When using Dataset's secret-namespace the referenced secret (likely residing in another namespace) is being copied to the dataset's namespace. This poses a huge security risk as users can use datashim to obtain access to secrets in other namespaces.

See here for original question: #73 (comment)_
@srikumar003 srikumar003 added the bug Something isn't working label Nov 12, 2021
@h0jeZvgoxFepBQ2C
Copy link

Any updates about this getting fixed?

@srikumar003 srikumar003 self-assigned this Dec 15, 2021
srikumar003 added a commit that referenced this issue Dec 16, 2021
@srikumar003
fix for #146
c0070d2
@srikumar003 srikumar003 mentioned this issue Dec 17, 2021
Closed
@srikumar003 srikumar003 linked a pull request Jan 17, 2022 that will close this issue
149 fix travis builds #150
Merged
@srikumar003 srikumar003 mentioned this issue Jul 22, 2024
Closed
@SlothCroissant SlothCroissant mentioned this issue Oct 2, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@srikumar003 srikumar003

Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

149 fix travis builds datashim-io/datashim
3 participants
@h0jeZvgoxFepBQ2C @srikumar003 @TobiasGoerke