Go modules package
github.com/openshift/apiserver-library-go
pkg:golang/github.com/openshift/apiserver-library-go
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-1260 | — | < 0.0.0-20230621 | 0.0.0-20230621 | Sep 24, 2023 | An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a | ||
| CVE-2023-0229 | — | < 0.0.0-20230120221150-cefee9e0162b | 0.0.0-20230120221150-cefee9e0162b | Jan 25, 2023 | A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 S |
- CVE-2023-1260Sep 24, 2023affected < 0.0.0-20230621fixed 0.0.0-20230621
An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a
- CVE-2023-0229Jan 25, 2023affected < 0.0.0-20230120221150-cefee9e0162bfixed 0.0.0-20230120221150-cefee9e0162b
A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 S