7.2
High
CVE-2023-5408 A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift
Description
A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the cluster.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenShift Container Platform 4.11 4.11 | earliest → < 4.11.0-202311211130.p0.g7021090.assembly.stream | 4.11.0-202311211130.p0.g7021090.assembly.stream |
| Red Hat OpenShift Container Platform 4.12 4.12 | earliest → < 4.12.0-202311021630.p0.gfe5e2a1.assembly.stream | 4.12.0-202311021630.p0.gfe5e2a1.assembly.stream |
| Red Hat OpenShift Container Platform 4.13 4.13 | earliest → < 4.13.0-202310210425.p0.gd525f5d.assembly.stream | 4.13.0-202310210425.p0.gd525f5d.assembly.stream |
| Red Hat OpenShift Container Platform 4.14 4.14 | earliest → < 4.14.0-202310201027.p0.g8b38d12.assembly.stream | 4.14.0-202310201027.p0.g8b38d12.assembly.stream |
References
- RHSA-2023:5006 access.redhat.com
- RHSA-2023:6130 access.redhat.com
- RHSA-2023:6842 access.redhat.com
- RHSA-2023:7479 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2242173 bugzilla.redhat.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat OpenShift Container Platform 4.11
The 5 CVEs of Red Hat OpenShift Container Platform 4.11 →
CVE-2023-6596
An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift…
7.5
High
CVE-2024-21626
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification
8.6
High
CVE-2022-4318
A vulnerability was found in cri-o
7.8
High
CVE-2023-1260
An authentication bypass vulnerability was discovered in kube-apiserver
8.0
High