OpenShift Container Platform 4.10 update for kube-apiserver



Published: 2023-09-06
Risk Low
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2023-1260
CWE-ID CWE-264
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe 		Red Hat OpenShift Container Platform
Client/Desktop applications / Software for system administration

openshift (Red Hat package)
Operating systems & Components / Operating system package or component

kernel-rt (Red Hat package)
Operating systems & Components / Operating system package or component

kernel (Red Hat package)
Operating systems & Components / Operating system package or component

Vendor Red Hat Inc.

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU78481

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2023-1260

CWE-ID:

Exploit availability:

Description

The vulnerability allows a remote user to escalate privileges within the application.

The vulnerability exists due to improper access restrictions within kube-apiserver. A remote authenticated user with "update, patch" permissions to the "pods/ephemeralcontainers" subresource can bypass SCC admission restrictions and gain control over a privileged pod.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Red Hat OpenShift Container Platform: 4.10 - 4.10.66

openshift (Red Hat package): before 4.10.0-202308291228.p0.g26fdcdf.assembly.stream.el8

kernel-rt (Red Hat package): before 4.18.0-305.103.1.rt7.178.el8_4

kernel (Red Hat package): before 4.18.0-305.103.1.el8_4

Fixed software versions

CPE2.3 External links

http://access.redhat.com/errata/RHSA-2023:4898


Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?



###SIDEBAR###