Privesc
CVE-2023-1260

8HIGH

Key Information:

Vendor: Red Hat
Status: kubernetes; Red Hat OpenShift Container Platform 4.10; Red Hat OpenShift Container Platform 4.11; Red Hat OpenShift Container Platform 4.12
Vendor: CVE Published:; 24 September 2023

What is CVE-2023-1260?

An authentication bypass vulnerability exists in kube-apiserver, which may allow an authenticated remote attacker to bypass intended access controls. By obtaining permissions to update or patch the 'pods/ephemeralcontainers' subresource, an attacker could potentially create or modify privileged pods, evading admission restrictions imposed by Security Context Constraints (SCCs). This could lead to unauthorized control over sensitive or critical components within a Kubernetes cluster, posing significant risks to the security of deployed applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch