CVE-2023-2431

Summary

CVE-2023-2431 is a newly identified vulnerability in Kubelet, an open-source containerManagement system. This issue permits pods to bypass seccomp profile enforcement when they use localhost type but leave the profile field empty. As a result, these pods operate in an unconfined state, effectively disabling seccomp. This weakness exposes Kubelet to potential security risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.