CVE-2023-0229

mediumPriorität · verfolgen · 25EPSS 0.006 · 51. PerzentilDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.65% (51st) EPSS

CVSS 6.3 · medium

Is it mine?

13 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · osv · cert_bund

EPSS · bewertet 2026-10-27

A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context Constraint (SCC) is "runtime/default," allowing users to disable seccomp for pods they can create and modify.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenmicroshift-0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8.src as a component of Red Hat OpenShift Container Platform 4.12redhat_csaf
For MicroShift 4.12, read the following documentation, which will be updated shortly for this release, for important instructions on how to install the latest RPMs and fully apply this asynchronous errata update: https://access.redhat.com/documentation/en-us/red_hat_build_of_microshift/4.12/html/release_notes/index
https://access.redhat.com/errata/RHBA-2023:1037
Behobenmicroshift-0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.12redhat_csaf
For MicroShift 4.12, read the following documentation, which will be updated shortly for this release, for important instructions on how to install the latest RPMs and fully apply this asynchronous errata update: https://access.redhat.com/documentation/en-us/red_hat_build_of_microshift/4.12/html/release_notes/index
https://access.redhat.com/errata/RHBA-2023:1037
Behobenmicroshift-networking-0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.12redhat_csaf
For MicroShift 4.12, read the following documentation, which will be updated shortly for this release, for important instructions on how to install the latest RPMs and fully apply this asynchronous errata update: https://access.redhat.com/documentation/en-us/red_hat_build_of_microshift/4.12/html/release_notes/index
https://access.redhat.com/errata/RHBA-2023:1037
Behobenmicroshift-release-info-0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8.noarch as a component of Red Hat OpenShift Container Platform 4.12redhat_csaf
For MicroShift 4.12, read the following documentation, which will be updated shortly for this release, for important instructions on how to install the latest RPMs and fully apply this asynchronous errata update: https://access.redhat.com/documentation/en-us/red_hat_build_of_microshift/4.12/html/release_notes/index
https://access.redhat.com/errata/RHBA-2023:1037
Behobenmicroshift-selinux-0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8.noarch as a component of Red Hat OpenShift Container Platform 4.12redhat_csaf
For MicroShift 4.12, read the following documentation, which will be updated shortly for this release, for important instructions on how to install the latest RPMs and fully apply this asynchronous errata update: https://access.redhat.com/documentation/en-us/red_hat_build_of_microshift/4.12/html/release_notes/index
https://access.redhat.com/errata/RHBA-2023:1037

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.16.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 3.4

v3.16.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · ENISA EU

v3.16.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LsecondaryAusnutzbarkeit 2.8 · Auswirkung 3.4

v3.16.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · OSV

v3.15.8mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:Usecondary · CVSS-BT (t0sche)

v3.16.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · Red Hat Product Security US

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-20USCWE-20USCWE-20US

betroffene Produkte (13)

Betroffene Produkte und Versionsbereiche.

Red Hat OpenShift Container Platform 4.11alle Versionencert_bundDEcpe:/a:redhat:openshift:container_platform_4.11
Red Hat OpenShift Container Platform 4.12alle Versionencert_bundDEcpe:/a:redhat:openshift:container_platform_4.12
Red Hat OpenShift Container Platform 4.13alle Versionencert_bundDEcpe:/a:redhat:openshift:container_platform_4.13
n/a github.com/openshift/apiserver-library-go≤ openshift/apiserver-library-go 4.11enisa_euvdEU
redhat openshift= 4.11nvdUScpe:2.3:a:redhat:openshift:*:*:*:*:*:*:*:*
redhat openshift= 4.12nvdUScpe:2.3:a:redhat:openshift:*:*:*:*:*:*:*:*
Go github.com/openshift/apiserver-library-go< 0.0.0-20230119093715-30f75d79e424osvUSpkg:golang/github.com/openshift/apiserver-library-go
Go github.com/openshift/apiserver-library-go< 0.0.0-20230120221150-cefee9e0162bosvUSpkg:golang/github.com/openshift/apiserver-library-go
microshift-0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8.src as a component of Red Hat OpenShift Container Platform 4.12alle Versionenfixedredhat_csafUS
microshift-0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.12alle Versionenfixedredhat_csafUS
microshift-networking-0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.12alle Versionenfixedredhat_csafUS
microshift-release-info-0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8.noarch as a component of Red Hat OpenShift Container Platform 4.12alle Versionenfixedredhat_csafUS
microshift-selinux-0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8.noarch as a component of Red Hat OpenShift Container Platform 4.12alle Versionenfixedredhat_csafUS

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

RHBA-2023:1037Red Hat Bug Fix Advisory: Red Hat build of MicroShift 4.12.6 bug fix and enhancement update2023-03-07csaf · redhat_csafUS
Red Hat build of MicroShift release 4.12.6 is now available with updates to packages and images that fix several bugs.
WID-SEC-W-2023-0862Red Hat OpenShift: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenDeutsch2023-04-04csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
GHSA-5465-xc2j-6p84github.com/openshift/apiserver-library-go Improper Input Validation vulnerability2023-01-26ghsa · osvUS
A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context Constraint (SCC) is "runtime/default," allowing users to disable seccomp for pods they can create and modify.
GO-2023-1549Improper input validation in github.com/openshift/apiserver-library-go2023-02-16vendor · osvUS
Low-privileged users can set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context Constraint (SCC) is "runtime/default," allowing users to disable seccomp for pods they can create and modify.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd osv cert_bund nvd redhat_csaf NVD CVE.org MITRE

veröffentlicht 2023-01-26geändert 2026-06-17

Referenzen (7)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan