p PatchFirst

CVE-2023-2727

CVE-2023-2727 · Bypassing policies imposed by the ImagePolicyWebhook admission plugin

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.

CVSS 6.5 · Medium · EPSS 1.1% · Fix available

Published
Updated

Stack: system · containers

Affected products and versions

  • kubernetes

    Versions
    • ≥ v1.24.14, ≤ <=: Affected (semver)
    • v1.25.0 - v1.25.10: Affected
    • v1.26.0 - v1.26.5: Affected
    • v1.27.0 - v1.27.2: Affected

    No fix published

  • kubernetes Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.20.5+really1.20.2-1

    Update to 1.20.5+really1.20.2-1

  • kubernetes Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.20.5+really1.20.2-1

    Update to 1.20.5+really1.20.2-1

  • kubernetes Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.20.5+really1.20.2-1

    Update to 1.20.5+really1.20.2-1

Original sources

Check your server →