CVE-2023-5528

Summary

CVE-2023-5528 is a newly disclosed vulnerability affecting Kubernetes clusters that use in-tree storage plugins for Windows nodes. A user with the ability to create pods and persistent volumes on these nodes can potentially escalate their privileges, gaining admin access. This issue only impacts Kubernetes clusters with Windows nodes, making it crucial for administrators to apply relevant patches as soon as possible to mitigate this escalation of privilege threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.