CVE-2023-1260

Aliases:GHSA-92hx-3mh6-hc49RHSA-2023:3976RHSA-2023:4312RHSA-2023:4898
Advisory lineage Upstream: 0 Downstream: 5
Modified
Published: 24 Sept 2023, 00:07
Last modified:02 Aug 2024, 05:40

Vulnerability Summary

Overall Risk (default)
medium
32/100
CVSS Score
8 HIGH
v3.1 (cve.org)
EPSS Score
1.57% LOW
2% probability +1.51%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 Sept 2023, 00:07
Published
Vulnerability first disclosed
02 Aug 2024, 05:40
Last Modified
Vulnerability information updated

Description

An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a new pod or patch one that they already have access to. This might allow evasion of SCC admission restrictions, thereby gaining control of a privileged pod.

CVSS Metrics

  • v3.1•HIGH•Score: 8CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 1.57%• Percentile: 74%

Techniques & Countermeasures

  • CWE-288•Authentication Bypass Using an Alternate Path or Channel

    The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected Systems

  • github.com/openshift•apiserver-library-go

    < 0.0.0-20230621

  • kubernetes•kube-apiserver

    na

  • redhat•openshift_container_platform

    4.10 | 4.11 | 4.12 | 4.13

  • redhat•openshift

    < 0:4.12.0-202307040929.p0.g1485cc9.assembly.stream.el8 | < 0:4.12.0-202307040929.p0.g1485cc9.assembly.stream.el9 | < 0:4.11.0-202307200925.p0.ga9da4a8.assembly.stream.el8 | < 0:4.10.0-202308291228.p0.g26fdcdf.assembly.stream.el7 | < 0:4.10.0-202308291228.p0.g26fdcdf.assembly.stream.el8

  • redhat•openshift-hyperkube

    < 0:4.12.0-202307040929.p0.g1485cc9.assembly.stream.el8 | < 0:4.12.0-202307040929.p0.g1485cc9.assembly.stream.el9 | < 0:4.11.0-202307200925.p0.ga9da4a8.assembly.stream.el8 | < 0:4.10.0-202308291228.p0.g26fdcdf.assembly.stream.el7 | < 0:4.10.0-202308291228.p0.g26fdcdf.assembly.stream.el8

References (20)