PT-2023-3195 · Kops · Kops

James Cleverley-Prance · Published 2023-06-22 · Updated 2024-08-21 · CVE-2023-1943

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions kOps (affected versions not specified)

Description The issue is related to errors in permission handling in the GCP Provider component of the kOps tool, which is used for automated management of Kubernetes virtual machine clusters. Exploitation of this issue can allow a remote attacker to escalate privileges by utilizing a container running in the cluster to access a Node service account.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-275

CWE-250

Related Identifiers

BDU:2023-03305

CVE-2023-1943

GHSA-8GWJ-M6VH-2G6J

GO-2023-2125

Affected Products

Kops

References · 13

• https://osv.dev/vulnerability/GHSA-8gwj-m6vh-2g6j · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1943 · Security Note
• https://osv.dev/vulnerability/GO-2023-2125 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03305 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1943 · Vendor Advisory
• https://github.com/kubernetes/kops · Note
• https://github.com/kubernetes/kops/issues/15539 · Note
• https://github.com/advisories/GHSA-8gwj-m6vh-2g6j · Note
• https://twitter.com/CVEnew/status/1712248217793139126 · Twitter Post
• https://discuss.kubernetes.io/t/kops-security-advisory-cve-2023-1943-privilege-escalation-in-kops-using-gce-gcp-provider-in-gossip-mode/24587 · Note
• https://vuldb.com/ru/?id.232103 · Note
• https://groups.google.com/g/kubernetes-security-announce/c/yrCE1x89oaU · Note
• https://t.me/cibsecurity/72163 · Telegram Post