Privesc

CVE-2023-1260

Summary

An authentication bypass vulnerability exists in kube-apiserver, which may allow an authenticated remote attacker to bypass intended access controls. By obtaining permissions to update or patch the 'pods/ephemeralcontainers' subresource, an attacker could potentially create or modify privileged pods, evading admission restrictions imposed by Security Context Constraints (SCCs). This could lead to unauthorized control over sensitive or critical components within a Kubernetes cluster, posing significant risks to the security of deployed applications.

References