VDB
RHSA-2023%3A6156
RHSA-2023%3A6156
PUBLISHED
CVSS 3.4000000953674316 LOW
A flaw was found in Kubernetes. This issue occurs when Kubernetes allows a local authenticated attacker to bypass security restrictions, caused by a flaw when using the localhost type for a seccomp profile but specifying an empty profile field. An attacker can bypass the seccomp profile enforcement by sending a specially crafted request.
Risk Scores
CVSS 3.1
3.4000000953674316
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4-wincw/windows-machine-config-rhel9-operator@sha256:6238c841ed9684453ac6167a666269e16175d724fd3a7c34b230dbf7244932de_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4-wincw/windows-machine-config-rhel9-operator@sha256:6238c841ed9684453ac6167a666269e16175d724fd3a7c34b230dbf7244932de_amd64, openshift4-wincw/windows-machine-config-rhel9-operator@sha256:6238c841ed9684453ac6167a666269e16175d724fd3a7c34b230dbf7244932de_amd64, openshift4-wincw/windows-machine-config-rhel9-operator@sha256:6238c841ed9684453ac6167a666269e16175d724fd3a7c34b230dbf7244932de_amd64 |
| Red Hat | openshift4-wincw/windows-machine-config-rhel9-operator@sha256:6238c841ed9684453ac6167a666269e16175d724fd3a7c34b230dbf7244932de_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4-wincw/windows-machine-config-rhel9-operator@sha256:6238c841ed9684453ac6167a666269e16175d724fd3a7c34b230dbf7244932de_amd64, openshift4-wincw/windows-machine-config-rhel9-operator@sha256:6238c841ed9684453ac6167a666269e16175d724fd3a7c34b230dbf7244932de_amd64 |
| Red Hat | openshift4-wincw/windows-machine-config-operator-bundle@sha256:ee24ac6ea9ba7c1067327d66b421815f88acff31165e07256de322bd02df4910_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4-wincw/windows-machine-config-operator-bundle@sha256:ee24ac6ea9ba7c1067327d66b421815f88acff31165e07256de322bd02df4910_amd64, openshift4-wincw/windows-machine-config-operator-bundle@sha256:ee24ac6ea9ba7c1067327d66b421815f88acff31165e07256de322bd02df4910_amd64, openshift4-wincw/windows-machine-config-operator-bundle@sha256:ee24ac6ea9ba7c1067327d66b421815f88acff31165e07256de322bd02df4910_amd64 |
| Red Hat | openshift4-wincw/windows-machine-config-operator-bundle@sha256:ee24ac6ea9ba7c1067327d66b421815f88acff31165e07256de322bd02df4910_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4-wincw/windows-machine-config-operator-bundle@sha256:ee24ac6ea9ba7c1067327d66b421815f88acff31165e07256de322bd02df4910_amd64, openshift4-wincw/windows-machine-config-operator-bundle@sha256:ee24ac6ea9ba7c1067327d66b421815f88acff31165e07256de322bd02df4910_amd64 |
Timeline
- Oct 30, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:6156 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2215555 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-15838 advisory
- https://issues.redhat.com/browse/OCPBUGS-18091 advisory
- https://issues.redhat.com/browse/OCPBUGS-18482 advisory
- https://issues.redhat.com/browse/OCPBUGS-19084 advisory
- https://issues.redhat.com/browse/WINC-1023 advisory
- https://issues.redhat.com/browse/WINC-1025 advisory
- https://issues.redhat.com/browse/WINC-1043 advisory
- https://issues.redhat.com/browse/WINC-1096 advisory
- https://issues.redhat.com/browse/WINC-1098 advisory
- https://issues.redhat.com/browse/WINC-1107 advisory
- https://issues.redhat.com/browse/WINC-805 advisory
- https://issues.redhat.com/browse/WINC-950 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6156.json advisory
- https://access.redhat.com/security/cve/CVE-2023-2431 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-2431 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-2431 advisory
…and 8 more