AZL-34898 CVE-2023-5408 affecting package kubernetes for versions less than 1.29.1-2

🗓️ 02 Nov 2023 03:15:10Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Privilege escalation in Kubernetes OpenShift; changing node role label could relocate workloads and access cluster.

Reporter	Title	Published	Views	Family All 23
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion HCI is vulnerable to elevated privileges due to OpenShift.	11 May 202416:54	–	ibm
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2023-5408)	5 Feb 202411:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable due to k8s.io/kubernetes ( CVE-2023-2728, CVE-2023-2727, CVE-2023-5408, CVE-2023-3955, CVE-2023-3676 )	8 Aug 202415:28	–	ibm
CBLMariner	CVE-2023-5408 affecting package kubernetes for versions less than 1.28.4-5	10 Apr 202421:48	–	cbl_mariner
CBLMariner	CVE-2023-5408 affecting package kubernetes for versions less than 1.29.1-2	19 Mar 202417:21	–	cbl_mariner
Circl	CVE-2023-5408	2 Nov 202306:22	–	circl
CNNVD	Red Hat OpenShift Security Vulnerability	4 Oct 202300:00	–	cnnvd
CVE	CVE-2023-5408	2 Nov 202302:55	–	cve
Cvelist	CVE-2023-5408 Openshift: modification of node role labels	2 Nov 202302:55	–	cvelist
EUVD	EUVD-2023-57723	3 Oct 202520:07	–	euvd