{"metadata": {"vulnerability": "CVE-2024-43403", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-08-12T18:02:04.966Z", "date_only": false, "value": "2024-08-12T18:02:04.966Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-43403", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-08-20T21:16:41.049Z", "date_only": false, "value": "2024-08-20T21:16:41.049Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-43403", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-08-20T21:16:41.049Z", "date_only": false, "value": "2024-08-20T21:16:41.049Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2024-43403", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-20T22:13:02Z", "date_only": false, "value": "2024-08-20T22:13:02Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H27C-6XM3-MCQP", "record": "GHSA-H27C-6XM3-MCQP", "field": "published"}, {"timestamp": "2024-08-20T22:15:04Z", "date_only": false, "value": "2024-08-20T22:15:04Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H27C-6XM3-MCQP", "record": "GHSA-H27C-6XM3-MCQP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-08-20T22:15:04.703Z", "date_only": false, "value": "2024-08-20T22:15:04.703", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43403", "record": "FKIE_CVE-2024-43403", "field": "published"}, {"timestamp": "2024-08-21T00:39:47Z", "date_only": false, "value": "2024-08-21T00:39:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/3692", "record": "CVE-2024-43403", "field": "creation_timestamp", "uuid": "d98d87e7-1fda-4780-b7cc-eaffda3356fc", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-43403 - Kanister Default-Kanister-Operator Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-43403 \nPublished : Aug. 20, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : Kanister is a data protection workflow management tool. The kanister has a deployment called default-kanister-operator, which is bound with a ClusterRole called edit via ClusterRoleBinding. The \"edit\" ClusterRole is one of Kubernetes default-created ClusterRole, and it has the create/patch/udpate verbs of daemonset resources, create verb of serviceaccount/token resources, and impersonate verb of serviceaccounts resources. A malicious user can leverage access the worker node which has this component to make a cluster-level privilege escalation. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/3692"}, {"timestamp": "2024-08-21T16:34:29.095Z", "date_only": false, "value": "2024-08-21T16:34:29.095778Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-43403", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-21T16:34:29.095Z", "date_only": false, "value": "2024-08-21T16:34:29.095778Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43403", "record": "FKIE_CVE-2024-43403", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-21T16:35:41.804Z", "date_only": false, "value": "2024-08-21T16:35:41.804Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-43403", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-21T16:35:41.804Z", "date_only": false, "value": "2024-08-21T16:35:41.804Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-43403", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-22T12:21:40Z", "date_only": false, "value": "2024-08-22T12:21:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/10921", "record": "CVE-2024-43403", "field": "creation_timestamp", "uuid": "93e4579a-4cd6-43f7-9d93-d4666dbcab77", "content": "\u200aCVE-2024-43403: Kanister Vulnerability Opens Door to Cluster-Level Privilege Escalation\n\nhttps://securityonline.info/cve-2024-43403-kanister-vulnerability-opens-door-to-cluster-level-privilege-escalation/", "url": "https://t.me/HackingInsights/10921"}, {"timestamp": "2024-08-24T20:12:36Z", "date_only": false, "value": "2024-08-24T20:12:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Rootsec_2/4225", "record": "CVE-2024-43403", "field": "creation_timestamp", "uuid": "906a1027-d746-472a-89fb-2a9edfdbc6bd", "content": "#exploit\n1. CVE-2024-41660:\nVulnerability in OpenBMC\nhttps://tetrelsec.com/posts/cve-2024-41660-slpd-lite\n\n2. CVE-2024-43403:\nKanister Vulnerability\nhttps://github.com/kanisterio/kanister/security/advisories/GHSA-h27c-6xm3-mcqp", "url": "https://t.me/Rootsec_2/4225"}, {"timestamp": "2024-08-25T00:15:33Z", "date_only": false, "value": "2024-08-25T00:15:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11030", "record": "CVE-2024-43403", "field": "creation_timestamp", "uuid": "c1af704a-d5e3-4d9c-92ca-158276774061", "content": "#exploit\n1. CVE-2024-41660:\nVulnerability in OpenBMC\nhttps://tetrelsec.com/posts/cve-2024-41660-slpd-lite\n\n2. CVE-2024-43403:\nKanister Vulnerability\nhttps://github.com/kanisterio/kanister/security/advisories/GHSA-h27c-6xm3-mcqp", "url": "https://t.me/CyberSecurityTechnologies/11030"}, {"timestamp": "2024-08-25T04:20:02Z", "date_only": false, "value": "2024-08-25T04:20:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/206", "record": "CVE-2024-43403", "field": "creation_timestamp", "uuid": "ee978714-dd85-4ea4-82ab-8080bdab6bc4", "content": "#exploit\n1. CVE-2024-41660:\nVulnerability in OpenBMC\nhttps://tetrelsec.com/posts/cve-2024-41660-slpd-lite\n\n2. CVE-2024-43403:\nKanister Vulnerability\nhttps://github.com/kanisterio/kanister/security/advisories/GHSA-h27c-6xm3-mcqp", "url": "https://t.me/HackerArsenal/206"}, {"timestamp": "2024-08-25T20:54:36Z", "date_only": false, "value": "2024-08-25T20:54:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/208", "record": "CVE-2024-43403", "field": "creation_timestamp", "uuid": "d4c8f8a7-13ca-4f2a-9b55-5644248d8eb6", "content": "#exploit\n1. CVE-2024-41660:\nVulnerability in OpenBMC\nhttps://tetrelsec.com/posts/cve-2024-41660-slpd-lite\n\n2. CVE-2024-43403:\nKanister Vulnerability\nhttps://github.com/kanisterio/kanister/security/advisories/GHSA-h27c-6xm3-mcqp", "url": "https://t.me/HackerArsenal/208"}, {"timestamp": "2024-11-25T20:50:10Z", "date_only": false, "value": "2024-11-25T20:50:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H27C-6XM3-MCQP", "record": "GHSA-H27C-6XM3-MCQP", "field": "modified"}, {"timestamp": "2024-11-25T20:50:10Z", "date_only": false, "value": "2024-11-25T20:50:10Z", "kind": "other", "label": "Withdrawn", "source": "github \u00b7 GHSA-H27C-6XM3-MCQP", "record": "GHSA-H27C-6XM3-MCQP", "field": "withdrawn"}, {"timestamp": "2026-06-17T07:50:58.800Z", "date_only": false, "value": "2026-06-17T07:50:58.800", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43403", "record": "FKIE_CVE-2024-43403", "field": "lastModified"}]}