PT-2023-22819 · Unknown · Clusternet
Younaman
·
Published
2023-04-21
·
Updated
2024-08-20
·
CVE-2023-30622
CVSS v3.1
6.7
Medium
| Vector | AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Clusternet versions prior to 0.15.2
Description
Clusternet is a general-purpose system for controlling Kubernetes clusters across different environments. An issue in Clusternet can be leveraged to lead to a cluster-level privilege escalation. The Clusternet has a deployment called
cluster-hub inside the clusternet-system Kubernetes namespace, which runs on worker nodes randomly. The deployment has a service account called clusternet-hub, which has a cluster role called clusternet:hub via cluster role binding. The clusternet:hub cluster role has "*" verbs of "*.*" resources. Thus, if a malicious user can access the worker node which runs the Clusternet, they can leverage the service account to do malicious actions to critical system resources. For example, the malicious user can leverage the service account to get ALL secrets in the entire cluster, resulting in cluster-level privilege escalation.Recommendations
To resolve the issue, update to version 0.15.2 or later. As a temporary workaround, consider restricting access to the
clusternet-hub service account to minimize the risk of exploitation. Restrict access to the cluster-hub deployment and the clusternet-system Kubernetes namespace to prevent malicious users from leveraging the service account. Avoid using the clusternet:hub cluster role until the issue is resolved.Exploit
Fix
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Clusternet