Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

🗓️ 16 Apr 2024 14:04:09Reported by Kubernetes Security Response CommitteeType

Kubernetes flaw lets envFrom containers bypass mountable secrets with the ServiceAccount plugin and enforce-mountable-secrets.

Reporter	Title	Published	Views	Family All 125
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in Kubernetes kube-apiserver [ CVE-2024-3177]	1 Aug 202416:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple vulnerabilities	31 Jul 202514:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	26 Mar 202503:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.4 addresses multiple security vulnerabilities	15 Apr 202502:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2024-3177)	29 Apr 202409:37	–	ibm
BDU FSTEC	The vulnerability of the KUBE-APISERVER component of the Kubernetes cluster management software allows a hacker to execute containers bypassing security policies.	27 May 202400:00	–	bdu_fstec
CBLMariner	CVE-2024-3177 affecting package kubernetes for versions less than 1.30.1-1	21 Jun 202409:32	–	cbl_mariner
Chainguard	CVE-2024-3177 vulnerabilities	22 Apr 202423:15	–	cgr
Circl	CVE-2024-3177	23 Feb 202614:54	–	circl
CNNVD	Kubernetes 输入验证错误漏洞	22 Apr 202400:00	–	cnnvd

Vulners

Node

16 Apr 2024 14:04Current

6Medium risk

Vulners AI Score6

CVSS 3.12.7

EPSS0.02224

SSVC