CVE-2023-5408

Summary

CVE-2023-5408 is a privilege escalation vulnerability affecting the node restriction admission plugin of the OpenShift Kubernetes API server. Malicious actors with the ability to modify a node role label can manipulate workload placements, potentially steering control plane and etcd nodes onto compromised worker nodes. By gaining broader access to the cluster, an attacker could escalate their privileges and compromise sensitive data or functionality. This vulnerability highlights the importance of securing node labels and managing worker node access to prevent unauthorized workload redirection.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.