← Database

CVE-2024-52284

HIGH CVSS: 7.7 Published: 2025-09-02 Modified: 2026-06-17

Description

Unauthorized disclosure of sensitive data: Any user with `GET` or `LIST` permissions on `BundleDeployment` resources could retrieve Helm values containing credentials or other secrets.

Affected Platforms

Unknown

Weakness Type

CWE-312

References