OpenShift Container Platform 4.10 update for kube-apiserver

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU78481

Risk: Low

CVSSv3.1: 3.7 [CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-1260

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges within the application.

The vulnerability exists due to improper access restrictions within kube-apiserver. A remote authenticated user with "update, patch" permissions to the "pods/ephemeralcontainers" subresource can bypass SCC admission restrictions and gain control over a privileged pod.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Red Hat OpenShift Container Platform: 4.10 - 4.10.66

openshift (Red Hat package): before 4.10.0-202308291228.p0.g26fdcdf.assembly.stream.el8

kernel-rt (Red Hat package): before 4.18.0-305.103.1.rt7.178.el8_4

kernel (Red Hat package): before 4.18.0-305.103.1.el8_4

External links

http://access.redhat.com/errata/RHSA-2023:4898

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.