From ad5a4eba86935338205f8a7decccaf3c3dbe7a30 Mon Sep 17 00:00:00 2001 From: "ori.agmon" Date: Wed, 10 Oct 2018 11:33:48 +0300 Subject: [PATCH] Improved vulnerability description for this hunter --- src/modules/hunting/apiserver.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/modules/hunting/apiserver.py b/src/modules/hunting/apiserver.py index 4f05f49..7e2f462 100644 --- a/src/modules/hunting/apiserver.py +++ b/src/modules/hunting/apiserver.py @@ -20,7 +20,7 @@ class ServiceAccountTokenAccess(Vulnerability, Event): """ Accessing the pod's service account token gives an attacker the option to use the server API """ def __init__(self, evidence): - Vulnerability.__init__(self, KubernetesCluster, name="read access to the token", category=AccessRisk) + Vulnerability.__init__(self, KubernetesCluster, name="Read access to pod's service account token", category=AccessRisk) self.evidence = evidence # Passive Hunter