CVE-2023-3955

Summary

CVE-2023-3955 is a newly discovered vulnerability in Kubernetes that affects clusters with Windows nodes. A user with the ability to create pods on these nodes may exploit a security flaw, escalating their privileges to administrative access. This issue poses a significant risk, as it allows unauthorized users to gain administrative control over Kubernetes clusters including Windows nodes. Organizations utilizing such clusters are strongly advised to update their Kubernetes components to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.