Aqua Vulnerability Database
Get Demo
Vulnerabilities
Misconfiguration
Runtime Security
Compliance
Kubernetes
>
General
>
No Anonymous User Bind
CRITICAL
Source
Trivy
ID
AVD-KSV-0122
Anonymous user access binding
Binding to anonymous user to any clusterrole or role is a security risk.
Impact
Links
https://blog.aquasec.com/kubernetes-exposed-one-yaml-away-from-disaster
Aqua Container Security