kube-apiserver vulnerable to policy bypass

🗓️ 03 Jul 2023 21:30:57Reported by GitHub Advisory DatabaseType

Policy bypass in kube-apiserver with ephemeral containers

Reporter	Title	Published	Views	Family All 105
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.	30 Jan 202617:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2023-2728)	13 Jul 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	12 Nov 202519:08	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for December 2025.	23 Dec 202508:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	7 Nov 202516:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable due to k8s.io/kubernetes ( CVE-2023-2728, CVE-2023-2727, CVE-2023-5408, CVE-2023-3955, CVE-2023-3676 )	8 Aug 202415:28	–	ibm
Chainguard	CVE-2023-2727 vulnerabilities	3 Jul 202321:15	–	cgr
Circl	CVE-2023-2727	4 Jul 202300:22	–	circl
CNNVD	Kubernetes 输入验证错误漏洞	15 Jun 202300:00	–	cnnvd

Vulners

Node

k8s.io kubernetesRange1.25.0–1.25.11go

k8s.io kubernetesRange1.26.0–1.26.6go

k8s.io kubernetesRange1.27.0–1.27.3go

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-2727
github	www.github.com/kubernetes/kubernetes/issues/118640
groups	www.groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8
github	www.github.com/kubernetes/kubernetes/pull/118356
github	www.github.com/kubernetes/kubernetes/pull/118471
github	www.github.com/kubernetes/kubernetes/pull/118473
github	www.github.com/kubernetes/kubernetes/pull/118474
github	www.github.com/kubernetes/kubernetes/pull/118512
openwall	www.openwall.com/lists/oss-security/2023/07/06/2
security	www.security.netapp.com/advisory/ntap-20230803-0004

13 Feb 2025 19:01Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

EPSS0.00191

SSVC