Aqua Vulnerability Database
Get Demo
Vulnerabilities
Misconfiguration
Runtime Security
Compliance
Kubernetes
>
General
>
No Wildcard Verb Resource Role
CRITICAL
Source
Trivy
ID
AVD-KSV-0044
No wildcard verb and resource roles
Check whether role permits wildcard verb on wildcard resource
Impact
Links
https://kubernetes.io/docs/concepts/security/rbac-good-practices/
Aqua Container Security