Log in Start free

Vulnerability · Published Sep 24, 2023 · Assigned by redhat

CVE-2023-1260Kube-apiserver: privesc

High 8.0

In plain English

A high-severity authentication bypass in github.com/openshift/apiserver-library-go. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 75% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.0High
Exploit odds (30 days)1.6%top 24.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a new pod or patch one that they already have access to. This might allow evasion of SCC admission restrictions, thereby gaining control of a privileged pod.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Gogithub.com/openshift/apiserver-library-go0.0.0-20230621GHSA-92hx-3mh6-hc49

Affected products (as reported)

VendorProductVersions
github.com/openshift/apiserver-library-go see references
Red Hat Red Hat OpenShift Container Platform 4.10 see references
Red Hat Red Hat OpenShift Container Platform 4.11 see references
Red Hat Red Hat OpenShift Container Platform 4.12 see references
Red Hat Red Hat OpenShift Container Platform 4.13 see references
Red Hat Red Hat OpenShift Container Platform 4.14 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 4 see references

Weakness: CWE-288 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References