Aqua Vulnerability Database
Get Demo
Vulnerabilities
Misconfiguration
Runtime Security
Compliance
Kubernetes
>
General
>
No System Masters Group Bind
CRITICAL
Source
Trivy
ID
AVD-KSV-0123
system:masters group access binding
Binding to system:masters group to any clusterrole or role is a security risk.
Impact
Links
https://www.aquasec.com/blog/kubernetes-authorization/
Aqua Container Security