6.5

CVE-2023-2727

Bypassing policies imposed by the ImagePolicyWebhook admission plugin

Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kubernetes ≫ Kubernetes Version <= 1.24.14
Kubernetes ≫ Kubernetes Version >= 1.25.0 <= 1.25.10
Kubernetes ≫ Kubernetes Version >= 1.26.0 <= 1.26.5
Kubernetes ≫ Kubernetes Version >= 1.27.0 <= 1.27.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.13% 0.623
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 1.2 5.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
jordan@liggitt.net 6.5 1.2 5.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.openwall.com/lists/oss-security/2023/07/06/2
Third Party Advisory
Mailing List
https://github.com/kubernetes/kubernetes/issues/118640
Issue Tracking
https://groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8
Mailing List
https://security.netapp.com/advisory/ntap-20230803-0004/