olearysec
| Name | olearysec |
|---|---|
| Signup | 05/13/2026 |
| Community Points | 41 |
| Commits | 11 |
| Submits | 1 |
| Posts | 3 |
| Upvote | 0 |
| Rank | Novice |
| Activity Badges | 📝 Editor |
Submits (1)
| ID | Title | Submission | Moderation | Entry | P | Status |
|---|---|---|---|---|---|---|
| 828539 | Azure 2026-03-17 Incorrect Privilege Assignment | 05/13/2026 | 06/01/2026 | 367647 | 20 | Accepted |
Commits (11)
| ID | Entry | CVE | Updated | Moderation | C | P |
|---|---|---|---|---|---|---|
| 25414196-206 | Microsoft Azure Backup for AKS confused deputy | 06/01/2026 | 06/01/2026 | 11 | 11 |
Posts (3)
Timeline (3)
The analysis of the timeline helps to identify the required approach and handling of single items and item collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Prioritizing items becomes possible.
| Date | Entry | CVE | Comment | V | Status |
|---|---|---|---|---|---|
| 06/01/2026 | 367647 | xxxxxxxxx xxxxxxxxxxxxx xx xxxxxxxxx xxxxx: xxxxxx xxxxxxxxxxx xx x xxx-xxxxxxxxx xxxxx xxxx xxxx. xx xxxxxx xxxx xxxxxxxxxx xxxxxxxxxxx xxx xx xxxxxxxxx xxxxxxxxx xx xxxxxx xxxxxxxxx. xx:x xx xxx xxxxxxx xxxxxxxxxxxxxx. xxx xxxxxx xxxx xxxxxxx xxxxx… | 0 | Rejected | |
| 06/01/2026 | 367647 | Technical clarification on privilege level: Backup Contributor is a low-privilege Azure RBAC role. It grants zero Kubernetes permissions and is routinely delegated to backup operators. PR:L is the correct classification. The attack also crosses trust… | 0 | Accepted | |
| 06/01/2026 | 367647 | Behavioral evidence of remediation: Prior to May 2026, Azure Backup for AKS allowed any principal with Backup Contributor role to configure Trusted Access bindings to arbitrary AKS clusters, bypassing RBAC authorization. Exploitation yielded cluster-adm… | 1 | Accepted |