EUVD-2023-2699

Malicious code in bioql PyPI...

Privilege Escalation

kOps is vulnerable to Privilege Escalation. The vulnerability is caused when running kOps with the GCP Provider in Gossip Mode, where Node service account credentials could be used by a container running in the cluster to retrieve sensitive information from the state storage bucket and escalate t...

kOps privilege escalation vulnerability

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

GHSA-8GWJ-M6VH-2G6J kOps privilege escalation vulnerability

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

CVE-2023-1943

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

Privilege escalation

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

CVE-2023-1943 Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

CVE-2023-1943 Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

CVE-2023-1943 Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

CVE-2023-1943

KOps Privilege Escalation (CVE-2023-1943): A vulnerability occurs when using the GCE/GCP provider in Gossip Mode, where node service account credentials could be accessed by a container in the cluster to retrieve sensitive information from the state storage bucket and escalate to cluster-admin pe...

CVE-2023-1943: Execution with Unnecessary Privileges

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

CVE-2023-1943

A flaw was found in the Kubernetes kOps. Affected versions of Kubernetes kOps could allow a remote authenticated attacker to gain elevated privileges on the system caused by a vulnerability when using the GCE/GCP Provider in Gossip Mode. By sending a specially-crafted request, an authenticated...

Kubernetes 安全漏洞

Kubernetes K8s is an open source system from the Cloud Native Computing Foundation for automating the deployment, scaling, and management of containerized applications. A security vulnerability exists in Kubernetes kOps that stems from improper privilege management in kOps when running in Gossip...