Vulnerability CVE-2023-3676: Information

Description

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2023-3676
Published: Nov. 1, 2023
Modified: Dec. 1, 2023
Error type identifier: CWE-20

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://groups.google.com/g/kubernetes-security-announce/c/d_fvHZ9a5zc
  • Third Party Advisory
https://github.com/kubernetes/kubernetes/issues/119339
  • Exploit
  • Mitigation
  • Patch
  • Third Party Advisory
https://security.netapp.com/advisory/ntap-20231130-0007/

      1. Configuration 1

        cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
        cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
        cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
        cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
        cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
        Running on/with:
        cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
    VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
    Version: v24.5.1
    Back to top