Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade kubernetes | Jul 30, 2024 | Jul 3, 2023 |
| Kubernetes | — | Upgrade Kubernetes to version 1.26.6Upgrade Kubernetes to version 1.27.3Upgrade Kubernetes to version 1.24.15Upgrade Kubernetes to version 1.25.11 | Jul 14, 2023 | Jul 3, 2023 |
| Oracle_linux | — | Upgrade olcne-olm-chartUpgrade olcne-kubevirt-chartUpgrade kubeadmUpgrade olcne-metallb-chartUpgrade olcne-extra-modulesUpgrade olcne-multus-chartUpgrade olcne-istio-chartUpgrade olcne-grafana-chartUpgrade olcne-agentUpgrade olcne-nginxUpgrade olcne-oci-ccm-chartUpgrade olcne-gluster-chartUpgrade olcne-rook-chartUpgrade olcnectlUpgrade olcne-api-serverUpgrade kubeletUpgrade olcne-prometheus-chartUpgrade kubectlUpgrade yqUpgrade olcne-utilsUpgrade olcne-calico-chart | May 21, 2024 | Jul 3, 2023 |
| Redhat Openshift | — | Upgrade python-oslo-upgradecheckUpgrade python-pycadfUpgrade python-cinderclientUpgrade python-keystonemiddlewareUpgrade python-oslo-serializationUpgrade python-futuristUpgrade python-toozUpgrade python-dracclientUpgrade openshift4-aws-isoUpgrade kata-containersUpgrade python-oslo-logUpgrade python-oslo-contextUpgrade python-pbrUpgrade crunUpgrade spdlogUpgrade python-fixturesUpgrade python-automatonUpgrade rust-afterburnUpgrade wasmedgeUpgrade python-sushy-oem-idracUpgrade python-hardwareUpgrade python-osc-libUpgrade crun-wasmUpgrade python-wraptUpgrade coreos-installerUpgrade python-oslo-concurrencyUpgrade python-os-traitsUpgrade ovn23.09Upgrade butaneUpgrade python-oslo-serviceUpgrade runcUpgrade python-glanceclientUpgrade python-ironic-prometheus-exporterUpgrade python-scciclientUpgrade openstack-ironic-python-agentUpgrade python-tenacityUpgrade python-proliantutilsUpgrade golang-github-prometheus-promuUpgrade python-osprofilerUpgrade python-ironic-libUpgrade microshiftUpgrade openshift-kuryrUpgrade python-oslo-versionedobjectsUpgrade kernelUpgrade container-selinuxUpgrade podmanUpgrade containernetworking-pluginsUpgrade python-decoratorUpgrade fmtUpgrade python-openstacksdkUpgrade openshift-clientsUpgrade cri-oUpgrade python-oslo-configUpgrade openshiftUpgrade python-oslo-policyUpgrade openstack-ironic-inspectorUpgrade python-oslo-i18nUpgrade cri-toolsUpgrade ignitionUpgrade python-oslo-utilsUpgrade nmstateUpgrade python-keystoneauth1Upgrade python-debtcollectorUpgrade gtestUpgrade python-requestsexceptionsUpgrade catchUpgrade python-swiftclientUpgrade openshift-ansibleUpgrade python-stevedoreUpgrade python-os-service-typesUpgrade python-cliffUpgrade toolboxUpgrade containers-commonUpgrade haproxyUpgrade python-keystoneclientUpgrade python-oslo-middlewareUpgrade openstack-ironicUpgrade python-oslo-messagingUpgrade python-oslo-cacheUpgrade kernel-rtUpgrade buildahUpgrade python-oslo-dbUpgrade python-sushyUpgrade google-benchmarkUpgrade conmonUpgrade skopeoUpgrade python-oslo-rootwrap | Nov 1, 2023 | Jun 15, 2023 |
| Suse | — | Upgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.23-controller-managerUpgrade kubernetes1.18-clientUpgrade kubernetes1.23-client-fish-completionUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.23-client-bash-completionUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.23-schedulerUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.24-client-commonUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.23-kubelet-commonUpgrade kubernetes1.24-proxyUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.18-client-commonUpgrade kubernetes1.24-clientUpgrade kubernetes1.23-apiserverUpgrade kubernetes1.23-kubeletUpgrade kubernetes1.23-client-commonUpgrade kubernetes1.23-clientUpgrade kubernetes1.23-proxyUpgrade kubernetes1.23-kubeadmUpgrade kubernetes1.24-controller-managerUpgrade kubernetes1.24-kubeadm | Jun 20, 2023 | Jun 19, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub