💣Exploit CVE-2024-12401 - "Cert-manager DoS Denial-of-Service Vulnerability"

[Maksim]

CVE ID : CVE-2024-12401
Published : Dec. 12, 2024, 9:15 a.m. | 21 minutes ago
Description : A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service (DoS) vector for the cert-manager in the cluster.
Severity: 4.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.