Published: 31/10/2023 Updated: 21/12/2023

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 0

A security issue exists in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.

Vulnerable Product	Search on Vulmon	Subscribe to Product
kubernetes kubernetes

Synopsis Important: Red Hat OpenShift support for Windows Containers 602 security update Type/Severity Security Advisory: Important Topic The components for Red Hat OpenShift support for Windows Containers 602 are now available This product release includes bug fixes and security updates for the following packages: windows-machine-config ...

Synopsis Important: Red Hat OpenShift for Windows Containers 900 security update Type/Severity Security Advisory: Important Topic The components for Red Hat OpenShift for Windows Containers 900 are now available This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and wi ...

概述 Important: Red Hat OpenShift support for Windows Containers 512 security update 类型/严重性 Security Advisory: Important 标题 The components for Red Hat OpenShift support for Windows Containers 512 are now available This product release includes bug fixes and security updates for the following packages: windows-machine-conf ...

Synopsis Important: Red Hat OpenShift support for Windows Containers 802 security update Type/Severity Security Advisory: Important Topic The components for Red Hat OpenShift support for Windows Containers 802 are now available This product release includes bug fixes and security updates for the following packages: windows-machine-config ...

Synopsis Important: Red Hat OpenShift support for Windows Containers 711 security update Type/Severity Security Advisory: Important Topic The components for Red Hat OpenShift support for Windows Containers 711 are now available This product release includes bug fixes and security updates for the following packages: windows-machine-config ...

Description This CVE is under investigation by Red Hat Product Security ...

CWE-20 https://github.com/kubernetes/kubernetes/issues/119595 https://groups.google.com/g/kubernetes-security-announce/c/JrX4bb7d83E https://security.netapp.com/advisory/ntap-20231221-0002/https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2023:4780 https://access.redhat.com/security/cve/cve-2023-3955

CVE-2023-3955

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect