Riskcovery

CVE-2023-2727

Bypassing policies imposed by the ImagePolicyWebhook admission plugin

State
Published
Severity
6.5 Medium
Published
Jul 3, 2023
Updated
Feb 13, 2025
Reserved
May 16, 2023

Read the record on cve.org

Description

Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Nkubernetes

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
KubernetesKubernetes
  • v1.24.14 through <=Affected
  • v1.25.0 - v1.25.10Affected
  • v1.26.0 - v1.26.5Affected
  • v1.27.0 - v1.27.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.