Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-2727

Bypassing policies imposed by the ImagePolicyWebhook admission plugin

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
kubernetes

Description

Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kubernetes Kubernetes

Default version status: unaffected

  • v1.24.14 to ≤ <=affected
  • v1.25.0 - v1.25.10affected
  • v1.26.0 - v1.26.5affected
  • v1.27.0 - v1.27.2affected

References