Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade kubernetes | Jul 30, 2024 | Jul 3, 2023 |
| Kubernetes | — | Upgrade Kubernetes to version 1.26.6Upgrade Kubernetes to version 1.27.3Upgrade Kubernetes to version 1.24.15Upgrade Kubernetes to version 1.25.11 | Jul 14, 2023 | Jul 3, 2023 |
| Oracle_linux | — | Upgrade olcne-extra-modulesUpgrade olcne-grafana-chartUpgrade olcne-gluster-chartUpgrade kubeadmUpgrade olcnectlUpgrade olcne-metallb-chartUpgrade olcne-multus-chartUpgrade olcne-nginxUpgrade olcne-agentUpgrade olcne-rook-chartUpgrade olcne-olm-chartUpgrade olcne-istio-chartUpgrade olcne-kubevirt-chartUpgrade olcne-oci-ccm-chartUpgrade olcne-prometheus-chartUpgrade kubectlUpgrade kubeletUpgrade olcne-calico-chartUpgrade yqUpgrade olcne-api-serverUpgrade olcne-utils | May 21, 2024 | Jul 3, 2023 |
| Redhat Openshift | — | Upgrade python-oslo-cacheUpgrade python-oslo-utilsUpgrade python-debtcollectorUpgrade python-oslo-middlewareUpgrade google-benchmarkUpgrade python-oslo-messagingUpgrade python-openstacksdkUpgrade buildahUpgrade openshift-clientsUpgrade python-keystoneauth1Upgrade gtestUpgrade python-oslo-configUpgrade openshift-ansibleUpgrade python-swiftclientUpgrade python-decoratorUpgrade python-keystoneclientUpgrade cri-toolsUpgrade nmstateUpgrade kernel-rtUpgrade openshiftUpgrade python-sushyUpgrade python-cliffUpgrade catchUpgrade python-requestsexceptionsUpgrade conmonUpgrade fmtUpgrade toolboxUpgrade containers-commonUpgrade python-oslo-i18nUpgrade haproxyUpgrade python-oslo-rootwrapUpgrade skopeoUpgrade cri-oUpgrade python-os-service-typesUpgrade ignitionUpgrade python-stevedoreUpgrade python-oslo-dbUpgrade openstack-ironicUpgrade openstack-ironic-inspectorUpgrade python-oslo-policyUpgrade rust-afterburnUpgrade python-scciclientUpgrade python-tenacityUpgrade golang-github-prometheus-promuUpgrade python-hardwareUpgrade python-automatonUpgrade spdlogUpgrade coreos-installerUpgrade butaneUpgrade python-oslo-upgradecheckUpgrade containernetworking-pluginsUpgrade kata-containersUpgrade python-pbrUpgrade python-wraptUpgrade openstack-ironic-python-agentUpgrade python-pycadfUpgrade python-oslo-versionedobjectsUpgrade python-oslo-serializationUpgrade python-toozUpgrade python-oslo-contextUpgrade python-ironic-prometheus-exporterUpgrade container-selinuxUpgrade python-os-traitsUpgrade python-proliantutilsUpgrade openshift4-aws-isoUpgrade python-osprofilerUpgrade python-sushy-oem-idracUpgrade python-ironic-libUpgrade python-oslo-logUpgrade python-oslo-concurrencyUpgrade python-cinderclientUpgrade python-oslo-serviceUpgrade python-fixturesUpgrade python-osc-libUpgrade wasmedgeUpgrade crun-wasmUpgrade openshift-kuryrUpgrade crunUpgrade kernelUpgrade microshiftUpgrade python-dracclientUpgrade runcUpgrade python-futuristUpgrade python-keystonemiddlewareUpgrade ovn23.09Upgrade python-glanceclientUpgrade podman | Nov 1, 2023 | Jun 15, 2023 |
| Suse | — | Upgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.23-schedulerUpgrade kubernetes1.23-controller-managerUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.23-client-bash-completionUpgrade kubernetes1.23-client-fish-completionUpgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.24-client-commonUpgrade kubernetes1.18-clientUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.24-proxyUpgrade kubernetes1.23-proxyUpgrade kubernetes1.23-kubeletUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.24-clientUpgrade kubernetes1.23-apiserverUpgrade kubernetes1.18-client-commonUpgrade kubernetes1.24-controller-managerUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.23-kubelet-commonUpgrade kubernetes1.23-client-commonUpgrade kubernetes1.23-clientUpgrade kubernetes1.23-kubeadm | Jun 20, 2023 | Jun 19, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub