Kubernetes 1.28.3

CPE Details

Kubernetes 1.28.3
kubernetes
kubernetes
1.28.3
2023-11-24
22h42 +00:00
2023-11-24
22h42 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:kubernetes:kubernetes:1.28.3:*:*:*:*:*:*:*

Informations

Vendor

kubernetes

Product

kubernetes

Version

1.28.3

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-5528 2023-11-14 20h32 +00:00 A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.
8.8
High
CVE-2020-8554 2021-01-21 17h09 +00:00 Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and should not typically be granted to users) of a LoadBalancer service can set the status.loadBalancer.ingress.ip to similar effect.
6.3
Medium