Not rated

CVE-2022-31677 An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0)

Description

An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0). A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially use their access token to continue their session beyond what proper use of their refresh token might allow.

Affected products and versions

Product	Affected versions	Fixed in
Pinniped Supervisor	Versions not published

Do you use Pinniped Supervisor?

Track this CVE Watch Pinniped Supervisor Check my SBOMs

www.cveye.io/en/cve/CVE-2022-31677

Timeline

Published August 29, 2022
Last modified August 3, 2024

References

github.com github.com

Track this CVE