github.com/openshift/apiserver-library-go

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.0

CVE-2023-1260

Kube-apiserver: privesc

An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would t…

Red Hat Red Hat OpenShift Container Platform 4 Red Hat OpenShift Container Platform 4.14 Red Hat OpenShift Container Platform 4.13 Go

Sep 24, 2023
Medium 6.3

CVE-2023-0229

github.com/openshift/apiserver-library-go Improper Input Validation vulnerability

A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used i…

github.com/openshift/apiserver-library-go Go

Jan 25, 2023