Tags

InformationDisclosure [113] DataExposure [101] ConfigMapAccess [92] Reconnaissance [96] CredentialAccess [94] SecretAccess [91] Tampering [92] ClusterStructure [77] PotentialPrivilegeEscalation [91] ClusterWideSecretAccess [78] LateralMovement [75] Persistence [75] PrivilegeEscalation [82] NodeAccess [68] DenialOfService [81] CodeExecution [54] ClusterAdminAccess [62] ElevationOfPrivilege [51] ResourceConfiguration [40] WildcardPermission [63] QuotaTampering [39] WorkloadLifecycle [59] NetworkManipulation [59] AuthorizationBypass [44] RBACQuery [63] WebhookReconnaissance [46] ServiceExposure [56] ResourceNameRestricted [65] OperationalData [52] WorkloadExecution [53] ClusterWideAccess [57] ControlPlaneDisruption [56] LogAccess [37] TrafficRedirection [31] IdentityManagement [38] PodExec [27] CriticalNamespace [50] BindingToPrivilegedRole [35] RBACManipulation [35] ManInTheMiddle [24] AvailabilityImpact [27] PodPortForward [14] PodAttach [11] ClusterWideLogAccess [25] DeprecatedFeature [25] PodSecurityPolicy [25] ClusterWidePodExec [21] StorageDetailsDisclosure [23] Spoofing [22] ResourceDeletion [25] LeaderElectionAbuse [21] NetworkPolicyManagement [17] NamespaceLifecycle [22] Impersonation [18] NamespaceAdmin [19] WebhookManipulation [17] CRDManipulation [21] ClusterWidePodPortForward [10] DataLoss [12] ResourceModification [11] CertificateManagement [9] CSRCreation [10] SelfPermissionReviewQuery [9] APIServiceManipulation [7] ControllerRevisionTampering [8] TokenCreation [8] StorageManipulation [11] ClusterWidePodAttach [7] NodeManipulation [8] SchedulingAbuse [8] CSRApproval [7] APIServerDoS [5] BackupAccess [5] NamespaceWideAccess [15] WorkloadDeployment [6]