Rewterz Threat Advisory – Multiple Kubernetes Vulnerabilities Exploited

Severity

High

Analysis Summary

CVE-2023-3676 CVSS:8.8

Kubernetes could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper input validation on Windows nodes. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain admin privileges.

CVE-2023-3893 CVSS:8.8

Kubernetes could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper input validation on kubernetes-csi-proxy. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain admin privileges.

CVE-2023-3955 CVSS:8.8

Kubernetes could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper input validation on Windows nodes. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain admin privileges.

Impact

• Privilege Escalation

Indicators Of Compromise

CVE

• CVE-2023-3676
• CVE-2023-3893
• CVE-2023-3955

Affected Vendors

Kubernetes

Affected Products

• Kubernetes kubelet 1.25.12
• Kubernetes kubelet 1.24.16
• Kubernetes kubelet 1.26.7
• Kubernetes kubelet 1.28.0
• Kubernetes kubelet 1.27.4

Remediation

Refer to Kubernetes GIT Repository for patch, upgrade or suggested workaround information.

Kubernetes GIT Repository