Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodes

🗓️ 14 Nov 2023 15:54:16Reported by Kubernetes Security Response CommitteeType

Insufficient input sanitization in in-tree storage plugin may escalate to admin on Windows nodes.

Reporter	Title	Published	Views	Family All 81
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to remote authentication attack due to Kubernetes Scheduler code ( CVE-2023-5528 )	20 Mar 202417:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Concert Software is vulnerable to multiple issues	22 Aug 202417:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	6 Jan 202606:08	–	ibm
BDU FSTEC	The vulnerability of the kubelet utility in the Kubernetes cluster management software allows a hacker to elevate their privileges to the level of an administrator.	17 Nov 202300:00	–	bdu_fstec
CBLMariner	CVE-2023-5528 affecting package kubernetes for versions less than 1.28.4-1	7 Dec 202315:29	–	cbl_mariner
CBLMariner	CVE-2023-5528 affecting package kubernetes for versions less than 1.28.7-2	19 Mar 202417:21	–	cbl_mariner
Chainguard	CVE-2023-5528 vulnerabilities	14 Nov 202321:15	–	cgr
Circl	CVE-2023-5528	25 Nov 202300:06	–	circl
CNNVD	Kubernetes Security Vulnerabilities	14 Nov 202300:00	–	cnnvd
CVE	CVE-2023-5528	14 Nov 202320:32	–	cve