CVE-2023-2431CWE-1287

Bypass of seccomp profile enforcement

Low · published June 16, 2023

CVSS v3.1
3.4
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.

The record
Technical detail
CVSS v3.1
3.4 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00257 · 16.4th percentile
Weakness
CWE-1287 · Improper Validation of Specified Type of Input
Published
2023-06-16T07:08Z
EPSS history
Timeline
  • 16 JUN 07:08Z
    Bypass of seccomp profile enforcement
    cvelistv5