id: GO-2022-1135
modules:
    - module: github.com/clastix/capsule
      versions:
        - fixed: 0.1.3
      vulnerable_at: 0.1.2
summary: |-
    Capsule vulnerable to privilege escalation by ServiceAccount deployed in a
    Tenant Namespace in github.com/clastix/capsule
cves:
    - CVE-2022-46167
ghsas:
    - GHSA-x45c-cvp8-q4fm
references:
    - advisory: https://github.com/clastix/capsule/security/advisories/GHSA-x45c-cvp8-q4fm
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2022-46167
    - fix: https://github.com/clastix/capsule/commit/1df430e71be8c4778c82eca3459978ad7d0b4b7b
    - fix: https://github.com/clastix/capsule/commit/75525ac19254b0c5111e34d7985e2be7bc8b1ac1
    - web: https://github.com/clastix/capsule/releases/tag/v0.1.3
source:
    id: GHSA-x45c-cvp8-q4fm
    created: 2024-08-20T14:52:17.823544-04:00
review_status: UNREVIEWED
unexcluded: EFFECTIVELY_PRIVATE