En resumen
- CVE-2023-2727 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a k8s.io/kubernetes, kubernetes (kubernetes).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 66.5% de las vulnerabilidades.
- Solución: actualizar a 1.25.11, 1.26.6, 1.27.3, 1.24.15 o posterior.
| Package | Affected versions | Patched versions |
|---|
| k8s.io/kubernetes Go | ≥ 1.25.0, < 1.25.11≥ 1.26.0, < 1.26.6≥ 1.27.0, < 1.27.3< 1.24.15
| 1.25.111.26.61.27.31.24.15
|
| kubernetes | ≥ 1.25.0, ≤ 1.25.10≥ 1.26.0, ≤ 1.26.5≥ 1.27.0, ≤ 1.27.2≤ 1.24.14
| No fix yet |
Description
Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
NVD description
Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
Más vulnerabilidades de k8s.io/kubernetes
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free