CVE-2023-5408
CVSS 3.1 Score 7.2 of 10 (high)
Details
Summary
CVE-2023-5408 is a privilege escalation vulnerability affecting the node restriction admission plugin of the OpenShift Kubernetes API server. Malicious actors with the ability to modify a node role label can manipulate workload placements, potentially steering control plane and etcd nodes onto compromised worker nodes. By gaining broader access to the cluster, an attacker could escalate their privileges and compromise sensitive data or functionality. This vulnerability highlights the importance of securing node labels and managing worker node access to prevent unauthorized workload redirection.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Red Hat Openshift Container Platform
Affected Vendors
- Red Hat
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions