Aqua Vulnerability Database
Try Aqua
Get Demo
Vulnerabilities
Misconfiguration
Runtime Security
Compliance
Rbac
>
General
> No Manage Rbac Resources
CRITICAL
Source
Trivy
ID
AVD-KSV-0050
Do not allow management of RBAC resources
An effective level of access equivalent to cluster-admin should not be provided.
Impact
Links
https://kubernetes.io/docs/concepts/security/rbac-good-practices/
Aqua Container Security