Improper Input Validation

Kubernetes is vulnerable to Improper Input Validation. The vulnerability is due to containers, init containers, and ephemeral containers with the envFrom field populated bypassing the mountable secrets policy, which ensures that pods running with a service account may only reference secrets...

Stay safe with Wiz's winning hand for securing Kubernetes

Ensure that your Kubernetes environments are secure and follow OWASP's Kubernetes Top 10 framework. Generate reports quickly and easily and remediate any issues with actionable insights...

SUSE-SU-2024:1404-1 Security update for kubernetes1.23

This update for kubernetes1.23 fixes the following issues: - CVE-2024-3177: Fixed bypass of mountable secrets policy imposed by the ServiceAccount admission plugin bsc1222539...

SUSE-SU-2024:1403-1 Security update for kubernetes1.24

This update for kubernetes1.24 fixes the following issues: - CVE-2024-3177: Fixed bypass of mountable secrets policy imposed by the ServiceAccount admission plugin bsc1222539...

Advisory ROSA-SA-2024-2405

software: kubernetes 1.25.15 WASP: ROSA-CHROME packageevrstring: kubernetes-1.25.15-1 CVE-ID: CVE-2023-2431 BDU-ID: 2023-03899 CVE-Crit: LOW CVE-DESC.: A vulnerability in the kubelet utility of the Kubernetes virtual machine cluster management software tool is related to insufficient validation o...

GHSA-PXHW-596R-RWQ5 Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, nodetaint, kubernetes-dns-node-cache, aws-ebs-csi-driver, aws-efs-csi-driver-fips, aws-efs-csi-driver, argocd-image-updater, kubeflow-pipelines, rancher-webhook, rancher-webhook-fips, local-static-provisioner, spark-operator, kubernete...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argocd-image-updater, ip-masq-agent, kubernetes, spark-operator, local-static-provisioner, nodetaint, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, kubernetes-dns-node-cache...

Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...

Low Photon OS Security Update - PHSA-2024-5.0-0255

Updates of 'kubernetes' packages of Photon OS have been released...

Low Photon OS Security Update - PHSA-2024-4.0-0598

Updates of 'kubernetes' packages of Photon OS have been released...

AZL-40051 CVE-2024-3177 affecting package kubernetes 1.28.4-25

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...

DEBIAN-CVE-2024-3177

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...

AZL-40016 CVE-2024-3177 affecting package kubernetes for versions less than 1.30.1-1

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...

CVE-2024-3177

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, nodetaint, kubernetes-dns-node-cache, aws-ebs-csi-driver, aws-efs-csi-driver-fips, aws-efs-csi-driver, argocd-image-updater, kubeflow-pipelines, rancher-webhook, rancher-webhook-fips, local-static-provisioner, spark-operator, kubernete...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argocd-image-updater, ip-masq-agent, kubernetes, spark-operator, local-static-provisioner, nodetaint, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, kubernetes-dns-node-cache...

UBUNTU-CVE-2024-3177

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...

CVE-2024-3177

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...

CVE-2024-3177

CVE-2024-3177 describes a bypass of Kubernetes’ mountable secrets policy when the ServiceAccount admission plugin is used together with the kubernetes.io/enforce-mountable-secrets annotation and containers (including init and ephemeral) that set envFrom. The vulnerability allows pods running unde...