CVE-2023-5528

CVSS V2 None CVSS V3 None
Description
A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.
Overview
  • CVE ID
  • CVE-2023-5528
  • Assigner
  • kubernetes
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-11-14T20:32:08.411Z
  • Last Modified Date
  • 2023-11-14T20:32:08.411Z
Weakness Enumerations
CWE URL
CWE-20 http://cwe.mitre.org/data/definitions/20.html
References
Reference URL Reference Tags
https://github.com/kubernetes/kubernetes/issues/121879 issue-tracking
https://groups.google.com/g/kubernetes-security-announce/c/SL_d4NR8pzA mailing-list
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4XZIX727JIKF5RQW7RVVBLWXBCDIBJA7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MPGMITSZXUCAVO7Q75675SOLXC2XXU4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JH444PWZBINXLLFV7XLIJIZJHSK6UEZ/
https://security.netapp.com/advisory/ntap-20240119-0009/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-5528
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5528
History
Created Old Value New Value Data Type Notes
2024-06-25 05:28:08 Added to TrackCVE