CVEvulnerability
CVE-2023-5408
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-11-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-269
Description
A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the cluster.
Affected configurations
• redhat openshift container platform 4.11
• redhat openshift container platform 4.12
• redhat openshift container platform 4.13
• redhat openshift container platform 4.14
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://access.redhat.com/errata/RHSA-2023:5006 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2023:6130 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2023:6842 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2023:7479 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-5408 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2242173 Issue Tracking, Vendor Advisory
- https://github.com/openshift/kubernetes/pull/1736 Issue Tracking
- https://access.redhat.com/errata/RHSA-2023:5006 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2023:6130 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2023:6842 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2023:7479 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-5408 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2242173 Issue Tracking, Vendor Advisory
- https://github.com/openshift/kubernetes/pull/1736 Issue Tracking