Go modules package
github.com/openshift/apiserver-library-go
pkg:golang/github.com/openshift/apiserver-library-go
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-1260 | Hig | 8.0 | < 0.0.0-20230621 | 0.0.0-20230621 | Sep 24, 2023 | An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a | |
| CVE-2023-0229 | Med | 6.3 | < 0.0.0-20230120221150-cefee9e0162b | 0.0.0-20230120221150-cefee9e0162b | Jan 26, 2023 | A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 S |
- affected < 0.0.0-20230621fixed 0.0.0-20230621
An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a
- affected < 0.0.0-20230120221150-cefee9e0162bfixed 0.0.0-20230120221150-cefee9e0162b
A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 S