| |
Vulnerability CVE-2022-31677
Published: 2022-08-29
| Description: |
An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0). A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially use their access token to continue their session beyond what proper use of their refresh token might allow. |
References: |
https://github.com/vmware-tanzu/pinniped/security/advisories/GHSA-rp4v-hhm6-rcv9
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
