Fedora: Security Advisory (FEDORA-2023-8f8ddb2428)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD, related to deficiencies in pathname restrictions for directories, allows attackers to gain unauthorized access to protected information.

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to shortcomings in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2023-0923

A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API. This flaw can lead to file content exposure and other issues...

CVE-2023-0923

A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API. This flaw can lead to file content exposure and other issues...

Design/Logic Flaw

A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API. This flaw can lead to file content exposure and other issues...

CVE-2023-0923 Odh-notebook-controller-container: missing authorization allows for file contents disclosure

A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API. This flaw can lead to file content exposure and other issues...

CVE-2023-0923 Odh-notebook-controller-container: missing authorization allows for file contents disclosure

A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API. This flaw can lead to file content exposure and other issues...

CVE-2023-0923

CVE-2023-0923 affects Red Hat OpenShift Data Science (RHODS) with the odh-notebook-controller-container vulnerability: insufficient authorization allows requests from other namespaces to reach the Jupyter API, exposing file contents and related data. Connected sources corroborate impact and root ...

[SECURITY] Fedora 39 Update: kubernetes-1.27.5-1.fc39

Open Source Production-Grade Container Scheduling And Management Platform...

Proof-of-Concept Released for Kubernetes Vulnerabilities Exposing Windows Nodes

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Three interconnected high-severity security vulnerabilities have been identified in Kubernetes. These vulnerabilities could potentially be exploited to achieve remote code execution with elevated...

The vulnerability of Microsoft Azure Kubernetes operating systems for Windows is related to deficiencies in access control, allowing attackers to escalate their privileges.

The vulnerability of Microsoft Azure Kubernetes operating systems for Windows is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

Alert: New Kubernetes Vulnerabilities Enable Remote Attacks on Windows Endpoints

Three interrelated high-severity security flaws discovered in Kubernetes could be exploited to achieve remote code execution with elevated privileges on Windows endpoints within a cluster. The issues, tracked as CVE-2023-3676, CVE-2023-3893, and CVE-2023-3955, carry CVSS scores of 8.8 and impact...

Can't Be Contained: Finding a Command Injection Vulnerability in Kubernetes

...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.11.49 bug fix and security update

Red Hat OpenShift Container Platform release 4.11.49 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11. Red Hat Product Security has rated this update as having a...

Patch now! September Microsoft Patch Tuesday includes two actively exploited zero-days

Microsoft's September 2023 Patch Tuesday is another important one. Not because it's a busy one, but because we have some special cases. Patch Tuesday includes security updates for 59 bugs, two of which are known to be actively exploited. The Cybersecurity & Infrastructure Security Agency CISA has...

CVE-2023-29332

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability...

CVE-2023-29332

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability...

Privilege escalation

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability...

CVE-2023-29332 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

CVE-2023-29332

CVE-2023-29332 affects Microsoft Azure Kubernetes Service (AKS). Exploitation could grant Cluster Administrator privileges remotely with low attack complexity and no user interaction. Multiple sources (MSRC, Malwarebytes, Qualys) indicate active patching via Microsoft Update/Patch Tuesday; apply ...