Bypassing policies imposed by the ImagePolicyWebhook and bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

🗓️ 13 Jun 2023 14:42:06Reported by Kubernetes Security Response CommitteeType

CVE-2023-2727: Ephemeral containers may bypass ImagePolicyWebhook image restrictions and secrets policy.

Reporter	Title	Published	Views	Family All 101
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.	30 Jan 202617:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2023-2728)	13 Jul 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	12 Nov 202519:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	7 Nov 202516:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable due to k8s.io/kubernetes ( CVE-2023-2728, CVE-2023-2727, CVE-2023-5408, CVE-2023-3955, CVE-2023-3676 )	8 Aug 202415:28	–	ibm
AlpineLinux	CVE-2023-2728	3 Jul 202320:06	–	alpinelinux
Chainguard	CVE-2023-2728 vulnerabilities	3 Jul 202321:15	–	cgr
Circl	CVE-2023-2728	4 Jul 202300:23	–	circl
CNNVD	Kubernetes 安全漏洞	15 Jun 202300:00	–	cnnvd