Description
Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
CVSS Metrics
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- Attack Vector
- network
- Complexity
- low
- Privileges
- high
- User Action
- none
- Scope
- unchanged
- Confidentiality
- high
- Integrity
- high
- Availability
- none
- Weaknesses
- CWE-20NVD-CWE-noinfo
Metadata
- Primary Vendor
- KUBERNETES
- Published
- 7/3/2023
- Last Modified
- 2/13/2025
- Source
- NIST NVD
- Note: Verify all details with official vendor sources before applying patches.
Affected Products
kubernetes : kuberneteskubernetes : kuberneteskubernetes : kuberneteskubernetes : kubernetes
AI-Powered Remediation
Generate remediation guidance or a C-suite brief for this vulnerability.