CVE-2023-2728
Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the `kubernetes.io/enforce-mountable-secrets` annotation are used together with ephemeral containers.
A flaw was found in Kubernetes, where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures that pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with ephemeral containers.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2023-05-16 CVE Reserved
- 2023-07-03 CVE Published
- 2024-09-05 First Exploit
- 2025-02-13 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-20: Improper Input Validation
CAPEC
- CAPEC-554: Functionality Bypass
References (7)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2023/07/06/3 | Mailing List |
|
| https://github.com/kubernetes/kubernetes/issues/118640 | Issue Tracking | |
| https://groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8 | Mailing List | |
| https://security.netapp.com/advisory/ntap-20230803-0004 |
|
| URL | Date | SRC |
|---|---|---|
| https://github.com/Cgv-Dev/Metasploit-Module-TFM | 2024-09-05 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2023-2728 | 2023-10-31 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2211348 | 2023-10-31 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Kubernetes Search vendor "Kubernetes" | Kubernetes Search vendor "Kubernetes" for product "Kubernetes" | <= 1.24.14 Search vendor "Kubernetes" for product "Kubernetes" and version " <= 1.24.14" | - |
Affected
| ||||||
| Kubernetes Search vendor "Kubernetes" | Kubernetes Search vendor "Kubernetes" for product "Kubernetes" | >= 1.25.0 <= 1.25.10 Search vendor "Kubernetes" for product "Kubernetes" and version " >= 1.25.0 <= 1.25.10" | - |
Affected
| ||||||
| Kubernetes Search vendor "Kubernetes" | Kubernetes Search vendor "Kubernetes" for product "Kubernetes" | >= 1.26.0 <= 1.26.5 Search vendor "Kubernetes" for product "Kubernetes" and version " >= 1.26.0 <= 1.26.5" | - |
Affected
| ||||||
| Kubernetes Search vendor "Kubernetes" | Kubernetes Search vendor "Kubernetes" for product "Kubernetes" | >= 1.27.0 <= 1.27.2 Search vendor "Kubernetes" for product "Kubernetes" and version " >= 1.27.0 <= 1.27.2" | - |
Affected
| ||||||