CVE-2023-2727
Bypassing policies imposed by the ImagePolicyWebhook admission plugin
Summary
Bypassing policies imposed by the ImagePolicyWebhook admission plugin
Original description
The description as published by the source.
Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-2727 kubernetes Fixed in: 1.20.5+really1.20.2-1
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- report github.com
- web openwall.com
- web groups.google.com