CVE-2023-1260

Summary

An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a new pod or patch one that they already have access to. This might allow evasion of SCC admission restrictions, thereby gaining control of a privileged pod.

Affected Software

VendorProductVersion RangeStatus
a994128188486d2dce99a528fbcc017d276081e0 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.100:4.10.0-202308291228.p0.g26fdcdf.assembly.stream.el7 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.110:4.11.0-202307200925.p0.ga9da4a8.assembly.stream.el8 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.120:4.12.0-202307040929.p0.g1485cc9.assembly.stream.el9 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.130:4.13.0-202307132344.p0.gf245ced.assembly.stream.el8 < *unaffected
Red HatRed Hat OpenShift Container Platform 4.140:4.14.0-202310261440.p0.g1586504.assembly.4.14.0.el9 < *unaffected

Weaknesses

  • CWE-288: Authentication Bypass Using an Alternate Path or Channel

Workarounds

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

ADP Enrichment

CVE Program Container

Additional References

References