Description (CNA)
A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Kubernetes / kubelet | affected v1.28.0 through v1.28.3; affected v1.27.0 through v1.27.7; affected v1.26.0 through v1.26.10; affected 0 through v1.25.15; unaffected v1.28.4; unaffected v1.27.8; unaffected v1.26.11; unaffected v1.25.16 |
CWE
CWE-20
References
- https://github.com/kubernetes/kubernetes/issues/121879
- https://groups.google.com/g/kubernetes-security-announce/c/SL_d4NR8pzA
ADP enrichment
No English description supplied.
- https://github.com/kubernetes/kubernetes/issues/121879
- https://groups.google.com/g/kubernetes-security-announce/c/SL_d4NR8pzA
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4XZIX727JIKF5RQW7RVVBLWXBCDIBJA7/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MPGMITSZXUCAVO7Q75675SOLXC2XXU4/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JH444PWZBINXLLFV7XLIJIZJHSK6UEZ/
- https://security.netapp.com/advisory/ntap-20240119-0009/
No English description supplied.
No references supplied.