Lucene search
K

6 matches found

OSV
OSV
added 2023/11/02 3:15 a.m.1 views

AZL-31786 CVE-2023-5408 affecting package kubernetes for versions less than 1.28.4-5

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the clust...

7.2CVSS7.1AI score0.00559EPSS
Exploits0References1
NVD
NVD
added 2023/11/02 3:15 a.m.15 views

CVE-2023-5408

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the clust...

7.2CVSS7.2AI score0.00559EPSS
Exploits0References7
OSV
OSV
added 2023/11/02 3:15 a.m.3 views

AZL-34898 CVE-2023-5408 affecting package kubernetes for versions less than 1.29.1-2

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the clust...

7.2CVSS7.1AI score0.00559EPSS
Exploits0References1
Prion
Prion
added 2023/11/02 3:15 a.m.16 views

Privilege escalation

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the clust...

5.8CVSS7.6AI score0.00559EPSS
Exploits0References7Affected Software1
RedhatCVE
RedhatCVE
added 2023/10/04 10:31 p.m.50 views

CVE-2023-5408

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the clust...

7.2CVSS7.3AI score0.00559EPSS
Exploits0References4
Rapid7 Blog
Rapid7 Blog
added 2020/12/10 8:3 p.m.38 views

NICER Protocol Deep Dive: Internet Exposure of etcd

Welcome to the NICER Protocol Deep Dive blog series! When we started researching what all was out on the internet way back in January, we had no idea we'd end up with a hefty, 137-page tome of a research report. The sheer length of such a thing might put off folks who might otherwise learn a thin...

6.8AI score
Exploits0
Rows per page
Query Builder