Aqua Vulnerability Database
Get Demo
Vulnerabilities
Misconfiguration
Runtime Security
Compliance
Kubernetes
>
General
>
No System Authenticated Group Bind
CRITICAL
Source
Trivy
ID
AVD-KSV-01011
system:authenticate group access binding
Binding to system:authenticate group to any clusterrole or role is a security risk.
Impact
Links
https://orca.security/resources/blog/sys-all-google-kubernetes-engine-risk/
Aqua Container Security