High severityGHSA Advisory· Published Sep 24, 2023· Updated Aug 2, 2024
Kube-apiserver: privesc
CVE-2023-1260
Description
An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a new pod or patch one that they already have access to. This might allow evasion of SCC admission restrictions, thereby gaining control of a privileged pod.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/openshift/apiserver-library-goGo | < 0.0.0-20230621 | 0.0.0-20230621 |
Affected products
2- Range: < 0.0.0-20230621
Patches
Vulnerability mechanics
Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
12- access.redhat.com/errata/RHSA-2023:3976ghsavendor-advisoryx_refsource_REDHATWEB
- access.redhat.com/errata/RHSA-2023:4093ghsavendor-advisoryx_refsource_REDHATWEB
- access.redhat.com/errata/RHSA-2023:4312ghsavendor-advisoryx_refsource_REDHATWEB
- access.redhat.com/errata/RHSA-2023:4898ghsavendor-advisoryx_refsource_REDHATWEB
- access.redhat.com/errata/RHSA-2023:5008ghsavendor-advisoryx_refsource_REDHATWEB
- github.com/advisories/GHSA-92hx-3mh6-hc49ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-1260ghsaADVISORY
- access.redhat.com/security/cve/CVE-2023-1260ghsavdb-entryx_refsource_REDHATWEB
- bugzilla.redhat.com/show_bug.cgighsaissue-trackingx_refsource_REDHATWEB
- github.com/openshift/apiserver-library-go/commit/a994128188486d2dce99a528fbcc017d276081e0ghsaWEB
- security.netapp.com/advisory/ntap-20231020-0010ghsaWEB
- security.netapp.com/advisory/ntap-20231020-0010/mitre
News mentions
0No linked articles in our index yet.