PT-2024-27057 · Unknown · Cert-Manager

Houqiyua · CVE-2024-36537 · Published 2024-07-24 · Updated 2026-05-21

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions cert-manager version 1.14.4

Description The issue is related to insecure permissions, allowing attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Recommendations For cert-manager version 1.14.4, update to a version that addresses the insecure permissions issue to prevent attackers from accessing sensitive data and escalating privileges.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BIT-CERT-MANAGER-2024-36537

CLEANSTART-2026-GZ35045

CLEANSTART-2026-OL32822

CVE-2024-36537

Affected Products

Cert-Manager

References · 90

• https://nvd.nist.gov/vuln/detail/CVE-2025-58189 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-61730 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-35469 · Security Note
• https://osv.dev/vulnerability/CVE-2024-36537 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-OL32822 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-39836 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-27143 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33811 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-61728 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-61725 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32280 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58185 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33814 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42499 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-27144 · Security Note