Modify secrets in a namespace
Tampering
Critical
Overview
| Field | Value |
|---|---|
| ID | 1013 |
| Name | Modify secrets in a namespace |
| Risk Category | Tampering |
| Risk Level | Critical |
| Role Type | Role |
| API Groups | core |
| Resources | secrets |
| Verbs | create, update, patch, delete |
| Tags | Persistence PotentialPrivilegeEscalation SecretAccess Tampering |
Description
Grants permission to create, update, patch, or delete secrets within a specific namespace. This allows an attacker to tamper with sensitive credentials, potentially escalate privileges by modifying service account tokens or application secrets, and establish persistence within that namespace.