cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials
影響: go:github.com/cert-manager/cert-manager >= 1.18.0, < 1.19.6 → 1.19.6, go:github.com/cert-manager/cert-manager >= 1.20.0-alpha.0, < 1.20.3 → 1.20.3
Challenge resources under acme.cert-manager.io can be created directly by namespace users. On create, cert-manager performs no admission validation tying the Challenge to an Order, an owner reference, or an Issuer-selected solver. The ACME Challenge controller then reconciles the direct resource and uses Challenge.spec.solver as the DNS01 provider configuration. When the direct Challenge references a ClusterIssuer, cert-manager derives the DNS provider secret namespace and ambient-credential po…
| CVE | CVE-2026-62290 |
|---|---|
| 정보원 | GitHub Advisory Database |
| 수집 시각 | 2026. 10. 30. 오전 01:39 |
| 데이터 | Markdown JSON |
2026. 10. 30. 오전 01:39, GitHub Advisory Database에서 "cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Go, GitHub. CVE: CVE-2026-62290.