CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, rook, smarter-device-manager-fips, flux, atlantis, nfs-subdir-external-provisioner-fips, thanos-operator, crossplane-provider-azure-sql, configmap-reload-fips, grafana-operator, cass-operator-fips, kuberay-operator, terragrunt,...

SUSE CVE-2023-3893

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...

Privilege Escalation

github.com/kubernetes-csi/csi-proxy is vulnerable to Privilege Escalation. The vulnerability is caused by insufficient input sanitization while constructing different commands from the input string passed to different functions implemented in pkg/os/volume/api.go and pkg/os/volume/api.go. A user...

UBUNTU-CVE-2023-3893

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s-fips, kubescape, up, falcoctl-fips, aws-efs-csi-driver-fips, kubevela, kiam, prometheus-adapter-fips, timestamp-authority-fips, terraform-provider-sendgrid-fips, kubeflow, dgraph, kubernetes-csi-livenessprobe, kubernetes-csi-livenessprobe-fips...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: slsa-verifier, k3d, kubescape, src, aactl, terraform-provider-sendgrid, buildkitd, cortex, scorecard, spark-operator, up, kubevela, dgraph, kubeflow...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: k3d, kpt, helm, amass, buildkitd, gomplate, secrets-store-csi-driver, grpcurl, dgraph, kubeflow, metacontroller, hey, spark-operator, memcached-exporter, flux-helm-controller, atlantis, kubevela, minio, dex, metrics-server, kubescape, terraform, pulumi-language-dotne...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: k3d, kpt, helm, amass, buildkitd, gomplate, secrets-store-csi-driver, grpcurl, dgraph, kubeflow, metacontroller, hey, spark-operator, memcached-exporter, flux-helm-controller, atlantis, kubevela, minio, dex, metrics-server, kubescape, terraform, pulumi-language-dotne...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, terraform, flux-source-controller, nodetaint, atlantis-fips, timestamp-authority-fips, nri-prometheus, secrets-store-csi-driver-provider-gcp, nats, cue, dgraph, smarter-device-manager-fips, atlantis, nfs-subdir-external-provisioner-fips,...

Kubernetes 安全漏洞

Kubernetes K8s is an open source system from the Cloud Native Computing Foundation for automating the deployment, scaling, and management of containerized applications. Kubernetes suffers from a security vulnerability that stems from the fact that a user who creates a Pod on a Windows node runnin...

PT-2023-4505 · Unknown · Kubernetes

Name of the Vulnerable Software and Affected Versions: Kubernetes affected versions not specified Description: A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes...

Insufficient input sanitization on kubernetes-csi-proxy leads to privilege escalation

CVSS Rating: CVSS:3.1/av:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - HIGH 8.8 A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if...

SUSE CVE-2019-11255

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

GHSA-F4W6-3RH6-6Q4Q vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner...

GHSA-F4W6-3RH6-6Q4Q vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner...

GHSA-HP87-P4GW-J4GQ vulnerabilities

Vulnerabilities for packages: thanos-operator-fips, thanos-operator, dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...

CVE-2022-28948 vulnerabilities

Vulnerabilities for packages: thanos-operator-fips, thanos-operator, dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...

CVE-2020-8569 Kubernetes CSI snapshot-controller DoS

Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resource when: - The VolumeSnapshot referenced a non-existing PersistentVolumeClaim and the VolumeSnapshot did not reference any VolumeSnapshotClass. - The snapshot-controller crashes...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.2 openshift-external-storage security update

An update for openshift-external-storage is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...