CVE-2023-29332

Summary

CVE-2023-29332 is an elevation of privilege vulnerability affecting Microsoft Azure Kubernetes Service. An attacker can exploit this flaw to gain higher levels of access within a Kubernetes cluster, potentially leading to unauthorized modifications or data exfiltration. This vulnerability can be triggered through a maliciously crafted Kubernetes YAML manifest file. Microsoft strongly advises all Azure Kubernetes Service users to apply the available patch as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.