CVE-2023-3676CWE-20

Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation

High · published October 31, 2023

CVSS v3.1
8.8
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

A security issue was discovered in Kubernetes where a user

that can create pods on Windows nodes may be able to escalate to admin

privileges on those nodes. Kubernetes clusters are only affected if they

include Windows nodes.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.13156 · 96.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2023-10-31T20:22Z
EPSS history
Timeline
  • 31 OCT 20:22Z
    Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation
    cvelistv5