8.8
CVSSv3

CVE-2023-5528

Published: 14/11/2023 Updated: 19/01/2024
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

A security issue exists in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

kubernetes kubernetes

fedoraproject fedora 37

fedoraproject fedora 38

fedoraproject fedora 39

Vendor Advisories

Synopsis Important: Red Hat OpenShift for Windows Containers 720 security update Type/Severity Security Advisory: Important Topic An update for windows-machine-config-operator-bundle-container and windows-machine-config-operator-container is now available for Red Hat OpenShift Container Platform 412Red Hat Product Security has rated this ...
Synopsis Important: Red Hat OpenShift for Windows Containers 811 security update Type/Severity Security Advisory: Important Topic The components for Red Hat OpenShift for Windows Containers 811 are now available This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and wi ...
概要 Important: Red Hat OpenShift for Windows Containers 603 security update タイプ/重大度 Security Advisory: Important トピック An update for windows-machine-config-operator-bundle-container and windows-machine-config-operator-container is now available for Red Hat OpenShift Container Platform 411Red Hat Product Security has ...