PT-2023-21049

🗓️ 15 Jun 2023 00:00:00Reported by Positive TechnologiesType

Ephemeral containers bypass mountable secrets policy via the ServiceAccount admission plugin with enforce-mountable-secrets.

Reporter	Title	Published	Views	Family All 111
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.	30 Jan 202617:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2023-2728)	13 Jul 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	12 Nov 202519:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	7 Nov 202516:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable due to k8s.io/kubernetes ( CVE-2023-2728, CVE-2023-2727, CVE-2023-5408, CVE-2023-3955, CVE-2023-3676 )	8 Aug 202415:28	–	ibm
AlpineLinux	CVE-2023-2728	3 Jul 202320:06	–	alpinelinux
Chainguard	CVE-2023-2728 vulnerabilities	3 Jul 202321:15	–	cgr
Circl	CVE-2023-2728	4 Jul 202300:23	–	circl
CNNVD	Kubernetes 安全漏洞	15 Jun 202300:00	–	cnnvd

Source	Link
bugzilla	www.bugzilla.suse.com/1214406
security	www.security.netapp.com/advisory/ntap-20230803-0004
suse	www.suse.com/support/update/announcement/2024/suse-su-20243341-1
suse	www.suse.com/security/cve/CVE-2019-1002100
suse	www.suse.com/security/cve/CVE-2018-19184
osv	www.osv.dev/vulnerability/OESA-2023-1413
groups	www.groups.google.com/g/kubernetes-security-announce/c/9oU_lW2cU_g
suse	www.suse.com/security/cve/CVE-2019-11253
suse	www.suse.com/security/cve/CVE-2025-47907
cve	www.cve.org/CVERecord

08 Aug 2025 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.5

EPSS0.02157

SSVC