Role with dangerous permissions

[nickumia-reisys]

Date of report: 12/6/2022
Severity: Medium
Due date is based on severity and described in RA-5. 15-days for Critical, 30-days for High, and 90-days for Moderate and lower.

• Analysis has been performed and an issue has been linked to address other occurrences for this class of vulnerability* (link)

* When a finding is identified, we create two issues. One to address the specific instance identified in the report. The other is to identify and address all other occurrences of this vulnerability within the application.

• Role with dangerous permissions
  • Detailed paths
    • Introduced through: resource › kubernetes_cluster_role[this] › rule[1] › resources
  • This issue is...
    • A role was found using a dangerous permissions
  • The impact of this is...
    • Using this role grants dangerous permissions
  • You can resolve it by...
    • Consider removing this permissions

[nickumia-reisys]

See below for my thoughts on this.

• [terraform-kubernetes-aws-load-balancer-controller] Role with dangerous permissions  data.gov#4096 (comment)