kube-apiserver vulnerable to policy bypass
Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-2727US | medium6.5 | — | ||
Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePol… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2023/07/06/2WEB
- https://github.com/kubernetes/kubernetesPACKAGE
- https://github.com/kubernetes/kubernetes/issues/118640WEB
- https://github.com/kubernetes/kubernetes/pull/118356WEB
- https://github.com/kubernetes/kubernetes/pull/118471WEB
- https://github.com/kubernetes/kubernetes/pull/118473WEB
- https://github.com/kubernetes/kubernetes/pull/118474WEB
- https://github.com/kubernetes/kubernetes/pull/118512WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan