CyberRota Analysis
AI-GeneratedA vulnerability in the Submariner operator exposes a long-lived broker service account bearer token within the Custom Resource specification, which can be accessed by attackers with permissions to the cluster's etcd database or through `kubectl get` commands. This token allows full control over the mesh network, potentially enabling unauthorized management of critical network resources, including endpoints and secrets. Organizations utilizing Submariner should prioritize addressing this vulnerability to mitigate the risk of unauthorized access and control over their network infrastructure.
Original NVD Description
A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account (SA) bearer token within the Submariner Custom Resource (CR) specification. An attacker with access to the cluster's etcd database or through `kubectl get` commands could obtain this token. The possession of this token grants full control over the mesh network, enabling unauthorized management of network resources such as endpoints and secrets.