Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade kubernetes | Jul 30, 2024 | Jul 3, 2023 |
| Kubernetes | — | Upgrade Kubernetes to version 1.25.11Upgrade Kubernetes to version 1.24.15Upgrade Kubernetes to version 1.26.6Upgrade Kubernetes to version 1.27.3 | Jul 14, 2023 | Jul 3, 2023 |
| Oracle_linux | — | Upgrade olcne-prometheus-chartUpgrade olcne-calico-chartUpgrade kubectlUpgrade olcne-api-serverUpgrade olcne-utilsUpgrade kubeletUpgrade yqUpgrade olcne-multus-chartUpgrade olcne-extra-modulesUpgrade kubeadmUpgrade olcne-rook-chartUpgrade olcne-olm-chartUpgrade olcnectlUpgrade olcne-istio-chartUpgrade olcne-metallb-chartUpgrade olcne-gluster-chartUpgrade olcne-nginxUpgrade olcne-oci-ccm-chartUpgrade olcne-kubevirt-chartUpgrade olcne-agentUpgrade olcne-grafana-chart | May 21, 2024 | Jul 3, 2023 |
| Redhat Openshift | — | Upgrade spdlogUpgrade python-ironic-prometheus-exporterUpgrade wasmedgeUpgrade python-scciclientUpgrade python-wraptUpgrade python-fixturesUpgrade python-dracclientUpgrade python-oslo-upgradecheckUpgrade python-pbrUpgrade python-pycadfUpgrade ovn23.09Upgrade python-glanceclientUpgrade python-oslo-contextUpgrade openstack-ironic-python-agentUpgrade python-oslo-serviceUpgrade python-osprofilerUpgrade crun-wasmUpgrade container-selinuxUpgrade butaneUpgrade runcUpgrade python-cinderclientUpgrade python-toozUpgrade golang-github-prometheus-promuUpgrade python-tenacityUpgrade rust-afterburnUpgrade python-oslo-logUpgrade python-ironic-libUpgrade python-oslo-concurrencyUpgrade python-os-traitsUpgrade openshift4-aws-isoUpgrade crunUpgrade python-keystonemiddlewareUpgrade containernetworking-pluginsUpgrade coreos-installerUpgrade python-futuristUpgrade podmanUpgrade kernelUpgrade python-proliantutilsUpgrade openshift-ansibleUpgrade microshiftUpgrade python-oslo-utilsUpgrade python-automatonUpgrade openshift-kuryrUpgrade python-oslo-configUpgrade kata-containersUpgrade python-osc-libUpgrade openstack-ironic-inspectorUpgrade python-requestsexceptionsUpgrade python-sushy-oem-idracUpgrade python-oslo-messagingUpgrade python-oslo-dbUpgrade python-oslo-serializationUpgrade conmonUpgrade gtestUpgrade python-oslo-versionedobjectsUpgrade python-hardwareUpgrade cri-toolsUpgrade kernel-rtUpgrade python-swiftclientUpgrade skopeoUpgrade haproxyUpgrade python-oslo-rootwrapUpgrade python-oslo-middlewareUpgrade buildahUpgrade fmtUpgrade python-oslo-i18nUpgrade nmstateUpgrade python-sushyUpgrade python-debtcollectorUpgrade python-keystoneauth1Upgrade cri-oUpgrade python-oslo-policyUpgrade containers-commonUpgrade openshift-clientsUpgrade python-cliffUpgrade catchUpgrade python-openstacksdkUpgrade ignitionUpgrade openshiftUpgrade python-keystoneclientUpgrade python-stevedoreUpgrade python-decoratorUpgrade openstack-ironicUpgrade toolboxUpgrade python-os-service-typesUpgrade python-oslo-cacheUpgrade google-benchmark | Nov 1, 2023 | Jul 3, 2023 |
| Suse | — | Upgrade kubernetes1.23-clientUpgrade kubernetes1.24-proxyUpgrade kubernetes1.23-client-commonUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.24-controller-managerUpgrade kubernetes1.23-kubeletUpgrade kubernetes1.23-kubeadmUpgrade kubernetes1.23-proxyUpgrade kubernetes1.23-apiserverUpgrade kubernetes1.18-client-commonUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.23-kubelet-commonUpgrade kubernetes1.24-clientUpgrade kubernetes1.23-controller-managerUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.18-clientUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.23-schedulerUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.24-client-commonUpgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.23-client-fish-completionUpgrade kubernetes1.23-client-bash-completion | Jun 20, 2023 | Jun 19, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub