olearysec
| 이름 | olearysec |
|---|---|
| 가입하기 | 2026. 05. 13. |
| 커뮤니티 포인트 | 41 |
| 커밋 | 11 |
| 제출하다 | 1 |
| 게시물 | 3 |
| 찬성 | 0 |
| 계급 | 초보자 |
| Activity Badges | 📝 Editor |
제출하다 (1)
| 아이디 | 제목 | 제출 | 모더레이션 | 항목 | 포 | 상태 |
|---|---|---|---|---|---|---|
| 828539 | Azure 2026-03-17 Incorrect Privilege Assignment | 2026. 05. 13. | 2026. 06. 01. | 367647 | 20 | 수락 |
커밋 (11)
| 아이디 | 항목 | CVE | 업데이트됨 | 모더레이션 | 변 | 포 |
|---|---|---|---|---|---|---|
| 25414196-206 | Microsoft Azure Backup for AKS 권한 상승 | 2026. 06. 01. | 2026. 06. 01. | 11 | 11 |
게시물 (3)
타임라인 (3)
| 날짜 | 항목 | CVE | 댓글 | V | 상태 |
|---|---|---|---|---|---|
| 2026. 06. 01. | 367647 | xxxxxxxxx xxxxxxxxxxxxx xx xxxxxxxxx xxxxx: xxxxxx xxxxxxxxxxx xx x xxx-xxxxxxxxx xxxxx xxxx xxxx. xx xxxxxx xxxx xxxxxxxxxx xxxxxxxxxxx xxx xx xxxxxxxxx xxxxxxxxx xx xxxxxx xxxxxxxxx. xx:x xx xxx xxxxxxx xxxxxxxxxxxxxx. xxx xxxxxx xxxx xxxxxxx xxxxx… | 0 | 거부 | |
| 2026. 06. 01. | 367647 | Technical clarification on privilege level: Backup Contributor is a low-privilege Azure RBAC role. It grants zero Kubernetes permissions and is routinely delegated to backup operators. PR:L is the correct classification. The attack also crosses trust… | 0 | 수락 | |
| 2026. 06. 01. | 367647 | Behavioral evidence of remediation: Prior to May 2026, Azure Backup for AKS allowed any principal with Backup Contributor role to configure Trusted Access bindings to arbitrary AKS clusters, bypassing RBAC authorization. Exploitation yielded cluster-adm… | 1 | 수락 |