PT-2023-22819 · Unknown · Clusternet
Younaman
·
Publicado
2023-04-21
·
Atualizado
2024-08-20
·
CVE-2023-30622
CVSS v3.1
6.7
Média
| Vetor | AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Clusternet versions prior to 0.15.2
Description
Clusternet is a general-purpose system for controlling Kubernetes clusters across different environments. An issue in Clusternet can be leveraged to lead to a cluster-level privilege escalation. The Clusternet has a deployment called
cluster-hub inside the clusternet-system Kubernetes namespace, which runs on worker nodes randomly. The deployment has a service account called clusternet-hub, which has a cluster role called clusternet:hub via cluster role binding. The clusternet:hub cluster role has "*" verbs of "*.*" resources. Thus, if a malicious user can access the worker node which runs the Clusternet, they can leverage the service account to do malicious actions to critical system resources. For example, the malicious user can leverage the service account to get ALL secrets in the entire cluster, resulting in cluster-level privilege escalation.Recommendations
To resolve the issue, update to version 0.15.2 or later. As a temporary workaround, consider restricting access to the
clusternet-hub service account to minimize the risk of exploitation. Restrict access to the cluster-hub deployment and the clusternet-system Kubernetes namespace to prevent malicious users from leveraging the service account. Avoid using the clusternet:hub cluster role until the issue is resolved.Exploit
Correção
Improper Privilege Management
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Clusternet