CVE-2023-33191CWE-284

kyverno seccomp control can be circumvented

Medium · published May 30, 2023

CVSS v3.1
4.6
EPSS
0%
Percentile
40.8
In the wild
Unconfirmed
What it is

Kyverno is a policy engine designed for Kubernetes. Kyverno seccomp control can be circumvented. Users of the podSecurity `validate.podSecurity` subrule in Kyverno 1.9.2 and 1.9.3 are vulnerable. This issue was patched in version 1.9.4.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00485 · 40.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2023-05-30T06:06Z
EPSS history
Timeline
  • 30 MAY 06:06Z
    kyverno seccomp control can be circumvented
    cvelistv5