Description (CNA)
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Kubernetes / kubelet | affected v1.28.0; affected v1.27.0 through v1.27.4; affected v1.26.0 through v1.26.7; affected v1.25.0 through v1.25.12; unaffected v1.28.1; unaffected v1.27.5; unaffected v1.26.8; unaffected v1.25.13; unaffected v1.24.17; affected 0 through v1.24.16 |
CWE
CWE-20
References
- https://github.com/kubernetes/kubernetes/issues/119339
- https://groups.google.com/g/kubernetes-security-announce/c/d_fvHZ9a5zc
- https://security.netapp.com/advisory/ntap-20231130-0007/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.