Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2023-33191

kyverno seccomp control can be circumvented

Description

Kyverno is a policy engine designed for Kubernetes. Kyverno seccomp control can be circumvented. Users of the podSecurity `validate.podSecurity` subrule in Kyverno 1.9.2 and 1.9.3 are vulnerable. This issue was patched in version 1.9.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

kyverno kyverno

  • >= 1.9.2, < 1.9.4affected

References