CVE-2023-2727CWE-20

Bypassing policies imposed by the ImagePolicyWebhook admission plugin

Medium · published July 3, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
66.2
In the wild
Unconfirmed
What it is

Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01134 · 66.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2023-07-03T20:05Z
EPSS history
Timeline
  • 03 JUL 20:05Z
    Bypassing policies imposed by the ImagePolicyWebhook admission plugin
    cvelistv5