olearysec
| Nombre | olearysec |
|---|---|
| Inscribirse | 2026-05-13 |
| Puntos De La Comunidad | 41 |
| Commits | 11 |
| Envía | 1 |
| Publicaciones | 3 |
| Voto A Favor | 0 |
| Rango | Novato |
| Activity Badges | 📝 Editor |
Envía (1)
| ID | Título | Sumisión | Moderación | Artículo | P | Estado |
|---|---|---|---|---|---|---|
| 828539 | Azure 2026-03-17 Incorrect Privilege Assignment | 2026-05-13 | 2026-06-01 | 367647 | 20 | Aceptado |
Commits (11)
| ID | Artículo | CVE | Actualizado | Moderación | C | P |
|---|---|---|---|---|---|---|
| 25414196-206 | Microsoft Azure Backup for AKS escalada de privilegios | 2026-06-01 | 2026-06-01 | 11 | 11 |
Publicaciones (3)
Cronología (3)
| Fecha | Artículo | CVE | Comentario | V | Estado |
|---|---|---|---|---|---|
| 2026-06-01 | 367647 | xxxxxxxxx xxxxxxxxxxxxx xx xxxxxxxxx xxxxx: xxxxxx xxxxxxxxxxx xx x xxx-xxxxxxxxx xxxxx xxxx xxxx. xx xxxxxx xxxx xxxxxxxxxx xxxxxxxxxxx xxx xx xxxxxxxxx xxxxxxxxx xx xxxxxx xxxxxxxxx. xx:x xx xxx xxxxxxx xxxxxxxxxxxxxx. xxx xxxxxx xxxx xxxxxxx xxxxx… | 0 | Rechazado | |
| 2026-06-01 | 367647 | Technical clarification on privilege level: Backup Contributor is a low-privilege Azure RBAC role. It grants zero Kubernetes permissions and is routinely delegated to backup operators. PR:L is the correct classification. The attack also crosses trust… | 0 | Aceptado | |
| 2026-06-01 | 367647 | Behavioral evidence of remediation: Prior to May 2026, Azure Backup for AKS allowed any principal with Backup Contributor role to configure Trusted Access bindings to arbitrary AKS clusters, bypassing RBAC authorization. Exploitation yielded cluster-adm… | 1 | Aceptado |