Azure Arc Enabled Kubernetes
by Microsoft
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-37968 | Cri | 0.65 | 10.0 | 0.03 | Oct 11, 2022 | Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster.… | ||
| CVE-2024-28917 | Med | 0.40 | 6.2 | 0.01 | Apr 9, 2024 | Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability |
- risk 0.65cvss 10.0epss 0.03
Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster.…
- risk 0.40cvss 6.2epss 0.01
Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability