Kubernetes: Schwachstelle ermöglicht Offenlegung von Informationen

Summary

Product

Vulnerabilities 1

• Low 2.7
  CVE-2024-3177 Public exploit

  Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

  A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFr…

  Kubernetes Kubernetes kubeflow-pipelines-apiserver argocd-image-updater Debian Azure Linux Wolfi Go
  Apr 22, 2024

Revision history

1. 2025-08-12 #5

   Neue Updates von SUSE aufgenommen

2. 2025-07-21 #4

   Neue Updates von SUSE aufgenommen

3. 2024-09-19 #3

   Neue Updates von SUSE aufgenommen

4. 2024-04-23 #2

   Neue Updates von SUSE aufgenommen

5. 2024-04-16 #1

   Initiale Fassung

References

• Kubernetes GitHub vom 2024-04-16
  https://github.com/kubernetes/kubernetes/issues/124336
• OSS Mailing List vom 2024-04-16
  https://seclists.org/oss-sec/2024/q2/126
• SUSE Security Update SUSE-SU-2024:1404-1 vom 2024-04-23
  https://lists.suse.com/pipermail/sle-security-updates/2024-April/018409.html
• SUSE Security Update SUSE-SU-2024:1403-1 vom 2024-04-23
  https://lists.suse.com/pipermail/sle-security-updates/2024-April/018410.html
• SUSE Security Update SUSE-SU-2024:3341-1 vom 2024-09-19
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019474.html
• SUSE Security Update SUSE-SU-2024:3343-1 vom 2024-09-19
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019472.html
• SUSE Security Update SUSE-SU-2025:02423-1 vom 2025-07-21
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CVDW5HPSEFFQUNXWXYMKJCDGJR4W243Q/
• SUSE Security Update SUSE-SU-2025:02423-2 vom 2025-08-13
  https://lists.suse.com/pipermail/sle-security-updates/2025-August/022151.html