Security Advisory

CVE-2022-31677

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-08-29 14:03:02
Last updated 2024-08-03 07:26:01
Assigner vmware
CVSS score not scored
State PUBLISHED

Description

An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0). A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially use their access token to continue their session beyond what proper use of their refresh token might allow.