PT-2024-28629 · Capsule · Capsule

Sparkechooo

·

Published

2024-08-20

·

Updated

2025-08-18

·

CVE-2024-39690

CVSS v4.0

8.6

High

VectorAV:A/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions Capsule versions 0.7.0 and earlier
Description The issue allows a tenant-owner to patch any arbitrary namespace that has not been taken over by a tenant, thereby gaining control of that namespace. This is possible because namespaces without the ownerReference field can be patched by the tenant-owner. The vulnerability can be exploited by sending a PATCH request to the /api/v1/namespaces/{namespace} endpoint, allowing the attacker to add an ownerReference field to the namespace.
Recommendations For Capsule versions 0.7.0 and earlier, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting the patch permission for tenant-owners to prevent them from patching arbitrary namespaces. Additionally, monitor your system for any suspicious activity, such as unauthorized namespace patches, and investigate any potential security incidents.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2024-39690
GHSA-MQ69-4J5W-3QWP
GO-2024-3077

Affected Products

Capsule