6.5
CVE-2023-2727
- EPSS 0.17%
- Veröffentlicht 03.07.2023 21:15:09
- Zuletzt bearbeitet 13.02.2025 17:16:22
- Quelle jordan@liggitt.net
- Teams Watchlist Login
- Unerledigt Login
Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kubernetes ≫ Kubernetes Version <= 1.24.14
Kubernetes ≫ Kubernetes Version >= 1.25.0 <= 1.25.10
Kubernetes ≫ Kubernetes Version >= 1.26.0 <= 1.26.5
Kubernetes ≫ Kubernetes Version >= 1.27.0 <= 1.27.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.393 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 1.2 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
|
| jordan@liggitt.net | 6.5 | 1.2 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.