PT-2023-3195 · Kops · Kops

James Cleverley-Prance · Publicado 2023-06-22 · Atualizado 2024-08-21 · CVE-2023-1943

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions kOps (affected versions not specified)

Description The issue is related to errors in permission handling in the GCP Provider component of the kOps tool, which is used for automated management of Kubernetes virtual machine clusters. Exploitation of this issue can allow a remote attacker to escalate privileges by utilizing a container running in the cluster to access a Node service account.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-275

CWE-250

Identificadores relacionados

BDU:2023-03305

CVE-2023-1943

GHSA-8GWJ-M6VH-2G6J

GO-2023-2125

Produtos afetados

Kops

Referências · 13

• https://github.com/kubernetes/kops · Nota
• https://github.com/kubernetes/kops/issues/15539 · Nota
• https://github.com/advisories/GHSA-8gwj-m6vh-2g6j · Nota
• https://osv.dev/vulnerability/GHSA-8gwj-m6vh-2g6j · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1712248217793139126 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-1943 · Nota de Segurança
• https://discuss.kubernetes.io/t/kops-security-advisory-cve-2023-1943-privilege-escalation-in-kops-using-gce-gcp-provider-in-gossip-mode/24587 · Nota
• https://vuldb.com/ru/?id.232103 · Nota
• https://osv.dev/vulnerability/GO-2023-2125 · Aviso do Fabricante
• https://groups.google.com/g/kubernetes-security-announce/c/yrCE1x89oaU · Nota
• https://t.me/cibsecurity/72163 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-03305 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-1943 · Aviso do Fabricante