Role-Based Access Control (RBAC) in Kubernetes is a security feature that governs access to resources within a cluster based on predefined roles and permissions. RBAC allows to define granular access policies, specifying which users or entities have the authority to perform certain operations on specific resources. RBAC can enforce the principle of least privilege.

Remediation

Apply granular RBAC.

Metadata

• Severity: medium
• Slug: lack-of-rbac

CWEs

• 272: Least Privilege Violation
• 269: Improper Privilege Management

OWASP

• A04:2021: Insecure Design
• A05:2021: Security Misconfiguration