Kubernetes Improper Input Validation vulnerability
A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-5528US | high8.8 | — | ||
A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes.… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/kubernetes/kubernetesPACKAGE
- https://github.com/kubernetes/kubernetes/issues/121879WEB
- https://github.com/kubernetes/kubernetes/pull/121881WEB
- https://github.com/kubernetes/kubernetes/pull/121882WEB
- https://github.com/kubernetes/kubernetes/pull/121883WEB
- https://github.com/kubernetes/kubernetes/pull/121884WEB
- https://github.com/kubernetes/kubernetes/pull/121885WEB
- https://groups.google.com/g/kubernetes-security-announce/c/SL_d4NR8pzAWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan