Product
IRSA
- First Reported
- Feb 9, 2024
- Latest Reported
- Feb 9, 2024
Reported Context (1)
- Once in the cluster, an attacker can abuse the existing IRSA or Pod Identity permissions assigned to cluster pods. To find all the pods assigned EKS pod identity, one can run the following command: Researchers Demonstrate EKS Access Entry Escalation and Pod Identity Credential Theft Paths
MITRE ATT&CK (5)
Vendors (1)
Products (3)
Tools (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.