Policy Bypass

🗓️ 06 Jul 2023 10:13:19Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 24 Views

Policy Bypass vulnerability in Kubernetes related to ephemeral containers and ServiceAccount admission plugin

Reporter	Title	Published	Views	Family All 101
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.	30 Jan 202617:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2023-2728)	13 Jul 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	12 Nov 202519:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	7 Nov 202516:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable due to k8s.io/kubernetes ( CVE-2023-2728, CVE-2023-2727, CVE-2023-5408, CVE-2023-3955, CVE-2023-3676 )	8 Aug 202415:28	–	ibm
AlpineLinux	CVE-2023-2728	3 Jul 202320:06	–	alpinelinux
Chainguard	CVE-2023-2728 vulnerabilities	3 Jul 202321:15	–	cgr
Circl	CVE-2023-2728	4 Jul 202300:23	–	circl
CNNVD	Kubernetes 安全漏洞	15 Jun 202300:00	–	cnnvd

Vulners

Node

k3s k3sMatch1.26.4.1-r0go

AND

k3s k3sMatch1.27.1.1-r1go

AND

k3s k3sMatch1.27.1.1-r0go

AND

alpinelinux alpine_linuxMatch3.18

k3s k3sMatch1.27.1.1-r1go

AND

k3s k3sMatch1.17.3.1-r0go

AND

k3s k3sMatch1.22.8.1-r1go

AND

k3s k3sMatch1.21.3.1-r0go

AND

k3s k3sMatch1.26.1.1-r2go

AND

k3s k3sMatch1.26.0.2-r0go

AND

k3s k3sMatch1.24.2.2-r0go

AND

k3s k3sMatch1.22.3.1-r1go

AND

k3s k3sMatch1.27.1.1-r0go

AND

k3s k3sMatch1.21.5.1-r2go

AND

k3s k3sMatch1.22.4.1-r0go

AND

k3s k3sMatch1.18.2.1-r0go

AND

k3s k3sMatch1.24.1.1-r0go

AND

k3s k3sMatch1.21.5.1-r3go

AND

k3s k3sMatch1.22.4.1-r1go

AND

k3s k3sMatch1.26.3.1-r1go

AND

k3s k3sMatch1.20.6.1-r1go

AND

k3s k3sMatch1.26.2.1-r0go

AND

k3s k3sMatch1.22.2.2-r0go

AND

k3s k3sMatch1.26.1.1-r1go

AND

k3s k3sMatch1.24.3.1-r1go

AND

k3s k3sMatch1.20.5.1-r0go

AND

k3s k3sMatch1.22.9.1-r0go

AND

k3s k3sMatch1.21.4.1-r0go

AND

k3s k3sMatch1.24.2.1-r0go

AND

k3s k3sMatch1.17.0.1-r0go

AND

k3s k3sMatch1.25.2.1-r0go

AND

k3s k3sMatch1.26.0.1-r0go

AND

k3s k3sMatch1.22.6.1-r0go

AND

k3s k3sMatch1.25.4.1-r2go

AND

k3s k3sMatch1.21.1.1-r0go

AND

k3s k3sMatch1.27.2.1-r0go

AND

k3s k3sMatch1.24.2.2-r1go

AND

k3s k3sMatch1.26.3.1-r0go

AND

k3s k3sMatch1.17.4.1-r0go

AND

k3s k3sMatch1.21.4.1-r1go

AND

k3s k3sMatch1.25.2.1-r1go

AND

k3s k3sMatch1.24.3.1-r0go

AND

k3s k3sMatch1.21.4.1-r2go

AND

k3s k3sMatch1.20.4.1-r0go

AND

k3s k3sMatch1.27.1.1-r2go

AND

k3s k3sMatch1.22.7.1-r1go

AND

k3s k3sMatch1.21.1.1-r1go

AND

k3s k3sMatch1.21.2.1-r0go

AND

k3s k3sMatch1.23.6.1-r0go

AND

k3s k3sMatch1.25.3.1-r0go

AND

k3s k3sMatch1.18.3.1-r0go

AND

k3s k3sMatch1.21.0.1-r1go

AND

k3s k3sMatch1.25.0.1-r0go

AND

k3s k3sMatch1.26.4.1-r0go

AND

k3s k3sMatch1.18.2.1-r1go

AND

k3s k3sMatch1.22.7.1-r0go

AND

k3s k3sMatch1.22.9.1-r1go

AND

k3s k3sMatch1.26.1.1-r0go

AND

k3s k3sMatch1.17.4.1-r1go

AND

k3s k3sMatch1.24.4.1-r0go

AND

k3s k3sMatch1.25.4.1-r1go

AND

k3s k3sMatch1.22.6.1-r1go

AND

k3s k3sMatch1.25.3.1-r1go

AND

alpinelinux alpine_linuxMatchedge

kubernetes github.com/kubernetes/kubernetesRangev1.27.0-alpha.0–1.27.0-alpha.0go

kubernetes github.com/kubernetes/kubernetesRangev1.26.0-alpha.0–1.26.0-alpha.0go

kubernetes github.com/kubernetes/kubernetesRangev1.25.0-alpha.0–1.25.0-alpha.0go

kubernetes github.com/kubernetes/kubernetesRangev0.18.0–0.18.0go

Source	Link
groups	www.groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8
github	www.github.com/kubernetes/kubernetes/issues/118640
github	www.github.com/kubernetes/kubernetes/commit/77a97cefad133342bada672c0fac827d622c19ce
github	www.github.com/kubernetes/kubernetes/pull/118512
github	www.github.com/kubernetes/kubernetes/commit/a813061f5a30687653c4a416cdb90aa155004b45
github	www.github.com/kubernetes/kubernetes/pull/118474
github	www.github.com/kubernetes/kubernetes/pull/118473
github	www.github.com/kubernetes/kubernetes/commit/f58aab87554bfd3c8894f422e353322df1659a97
github	www.github.com/kubernetes/kubernetes/commit/3a77d5a59f02546512e3e3d13486017b123124eb
github	www.github.com/kubernetes/kubernetes/pull/118471

13 Feb 2025 19:35Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.5

EPSS0.04853

SSVC