Leverage the kruise-daemon pod to list all secrets in the entire cluster
CVE-2023-30617

6.5MEDIUM

Key Information:

Vendor

Openkruise

Status
Kruise
Vendor
CVE Published:
3 January 2024

What is CVE-2023-30617?

The vulnerability in the Kruise application allows attackers with root privileges on the node running the kruise-daemon to exploit the pod and gain access to all secrets within the Kubernetes cluster. By capturing sensitive information such as the kruise-manager service account token, the attacker can escalate privileges, potentially leading to unauthorized modifications of pods and other critical resources. Updates in versions 1.3.1, 1.4.1, and 1.5.2 address this issue, and users not utilizing imagepulljob functions have the option to modify the kruise-daemon-role to restrict cluster-level secret retrieval.

Affected Version(s)

kruise >= 0.8.0, < 1.3.1 < 0.8.0, 1.3.1

kruise = 1.4.0 = 1.4.0

kruise >= 1.5.0, < 1.5.2 < 1.5.0, 1.5.2

References

https://github.com/openkruise/kruise/security/advisories/...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.