7.2
Élevée
CVE-2023-5408 A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift
Description
A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the cluster.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat OpenShift Container Platform 4.11 4.11 | premières → < 4.11.0-202311211130.p0.g7021090.assembly.stream | 4.11.0-202311211130.p0.g7021090.assembly.stream |
| Red Hat OpenShift Container Platform 4.12 4.12 | premières → < 4.12.0-202311021630.p0.gfe5e2a1.assembly.stream | 4.12.0-202311021630.p0.gfe5e2a1.assembly.stream |
| Red Hat OpenShift Container Platform 4.13 4.13 | premières → < 4.13.0-202310210425.p0.gd525f5d.assembly.stream | 4.13.0-202310210425.p0.gd525f5d.assembly.stream |
| Red Hat OpenShift Container Platform 4.14 4.14 | premières → < 4.14.0-202310201027.p0.g8b38d12.assembly.stream | 4.14.0-202310201027.p0.g8b38d12.assembly.stream |
Références
- RHSA-2023:5006 access.redhat.com
- RHSA-2023:6130 access.redhat.com
- RHSA-2023:6842 access.redhat.com
- RHSA-2023:7479 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2242173 bugzilla.redhat.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat OpenShift Container Platform 4.11
Les 5 CVE de Red Hat OpenShift Container Platform 4.11 →
CVE-2023-6596
An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift…
7.5
Élevée
CVE-2024-21626
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification
8.6
Élevée
CVE-2022-4318
A vulnerability was found in cri-o
7.8
Élevée
CVE-2023-1260
An authentication bypass vulnerability was discovered in kube-apiserver
8.0
Élevée