VYPR
← All advisories
High severity7.8NVD Advisory· Published Jun 5, 2023· Updated Jun 17, 2026

CVE-2023-3027

CVE-2023-3027

Description

The grc-policy-propagator allows security escalation within the cluster. The propagator allows policies which contain some dynamically obtained values (instead of the policy apply a static manifest on a managed cluster) of taking advantage of cluster scoped access in a created policy. This feature does not restrict properly to lookup content from the namespace where the policy was created.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • grc-policy-propagator/grc-policy-propagatordescription
  • Red Hat/grc-policy-propagatorllm-fuzzy
  • Red Hat/Advanced Cluster Management For Kubernetes3 versions
    cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:2.5:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:2.7:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.