NetSight
IP …
high8.8

CVE-2023-5528

Kubernetes Improper Input Validation vulnerability

Impact

A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.

Affected packages

EcosystemPackageAffectedFixed in
gok8s.io/kubernetes>= 1.28.0, < 1.28.41.28.4

Affected products

VendorProductAffected versions
KubernetesKubernetes
from 1.8.0 before 1.25.16
from 1.26.0 before 1.26.11
from 1.27.0 before 1.27.8
from 1.28.0 before 1.28.4
FedoraprojectFedora
Versions 37, 38, 39

Weakness classification

CWE-20

References