8.0Hoch

CVE-2023-1943Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode

Kubernetes kops; kubernetes kops Veröffentlicht: 2023-10-12 02:01 (vor 3 Jahren)

Beschreibung

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.

Schwachstellentyp (CWE): CWE-250

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
Kubernetes	kops	< 1.25.3, fixed 1.25.3, 1.26.0 – < 1.26.2, fixed 1.26.2

Referenzen und Patches

https://github.com/kubernetes/kops/issues/15539 issue-tracking
https://groups.google.com/g/kubernetes-security-announce/c/yrCE1x89oaU mailing-list

CVSS-Score

8.0Hoch

Quelle: kubernetes · CVSS 3.1

Angriffsvektor: Benachbart
Komplexität: Niedrig
Rechte erforderlich: Niedrig
Benutzerinteraktion: Keine
Geltungsbereich: Unverändert
Vertraulichkeit: Hoch
Integrität: Hoch
Verfügbarkeit: Hoch

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

0.64%

höher als 51 % aller CVEs

CISA-Bewertung (SSVC)

Ausnutzung: none
Automatisierbar: no
Technische Auswirkung: total

Zeitverlauf

ID reserviert2023-04-07
Veröffentlicht2023-10-12 02:01
Bei IP-DB eingegangen2026-10-24 23:52
Zuletzt aktualisiert2024-09-18 18:06

Vergeben von (CNA): kubernetes

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — Kubernetes

2.7Niedrig

CVE-2026-116472 vor 6 Tagen

ingress-nginx mirror-target self-DOS

Kubernetes ingress-nginx; SUSE Rancher Prime RKE2 ingress-nginx

A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial of service of the ingress-nginx data plane, or possibly redirect traffic from other Ingresses. Kubernetes clusters are only affected…

5.9Mittel

CVE-2026-2270 vor 16 Tagen

StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation

Kubernetes Kubernetes

A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects to create a cross-namespace pod. An attacker exploiting this vulnerability would have full c…

5.8Mittel

CVE-2026-76654 vor 16 Tagen

Subpath symlinking on Windows nodes permits NTLM coercion

Kubernetes Kubernetes

An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does not reject a target that resolves…

6.5Mittel

CVE-2026-19444 vor 1 Monat

Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes

Kubernetes Kubernetes

A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on…

2.7Niedrig

CVE-2026-15687 vor 3 Monaten

Path traversal via non-tar copyDirectoryFromPod

Kubernetes kubernetes-client/java

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.

6.5Mittel

CVE-2026-3864 vor 7 Monaten

CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server

Kubernetes CSI Driver for NFS

A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI driver could craft volume identif…