AZL-31786 CVE-2023-5408 affecting package kubernetes for versions less than 1.28.4-5

🗓️ 02 Nov 2023 03:15:10Reported by GoogleType

Privilege escalation in OpenShift Kubernetes node restriction lets attacker change node role label to move workloads and gain access.

Reporter	Title	Published	Views	Family All 23
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion HCI is vulnerable to elevated privileges due to OpenShift.	11 May 202416:54	–	ibm
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2023-5408)	5 Feb 202411:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable due to k8s.io/kubernetes ( CVE-2023-2728, CVE-2023-2727, CVE-2023-5408, CVE-2023-3955, CVE-2023-3676 )	8 Aug 202415:28	–	ibm
CBLMariner	CVE-2023-5408 affecting package kubernetes for versions less than 1.28.4-5	10 Apr 202421:48	–	cbl_mariner
CBLMariner	CVE-2023-5408 affecting package kubernetes for versions less than 1.29.1-2	19 Mar 202417:21	–	cbl_mariner
Circl	CVE-2023-5408	2 Nov 202306:22	–	circl
CNNVD	Red Hat OpenShift Security Vulnerability	4 Oct 202300:00	–	cnnvd
CVE	CVE-2023-5408	2 Nov 202302:55	–	cve
Cvelist	CVE-2023-5408 Openshift: modification of node role labels	2 Nov 202302:55	–	cvelist
EUVD	EUVD-2023-57723	3 Oct 202520:07	–	euvd