vmware/pinniped

vmware/pinniped

GitHubGitHub
GitHubgithub.com
pinniped.devpinniped.dev
Releases53
Frequency1 month 1 week
Last Release
Stars718
Pinniped is the easy, secure way to log in to your Kubernetes clusters.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-22975↗
6.6 MEDIUM6 MEDIUM

An issue was discovered in the Pinniped Supervisor with either LADPIdentityProvider or ActiveDirectoryIdentityProvider resources. An attack would involve the malicious user changing the common name (CN) of their user entry on the LDAP or AD server to include special characters, which could be used to perform LDAP query injection on the Supervisor's LDAP query which determines their Kubernetes group membership.