An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0). A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially use their access token to continue their session beyond what proper use of their refresh token might allow.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| go.pinniped.dev(Go) | 0.3.0 | 0.19.0 | N/A |
CVSS Metrics
