https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:24:42 +0000 https://cve.radiocsirt.org/vuln/cve-2023-1260 <p><strong>Affected:</strong> github.com/openshift/apiserver-library-go, Red Hat OpenShift Container Platform 4.10, Red Hat OpenShift Container Platform 4.11, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4</p> <p>An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions &#34;update, patch&#34; the &#34;pods/ephemeralcontainers&#34; subresource beyond what the default is. They would then need to create a new pod or patch one that they already have access to. This might allow evasion of SCC admission restrictions, thereby gaining control of a privileged pod.</p> <p><strong>Affected:</strong> github.com/openshift/apiserver-library-go, Red Hat OpenShift Container Platform 4.10, Red Hat OpenShift Container Platform 4.11, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4</p> <p>An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions &#34;update, patch&#34; the &#34;pods/ephemeralcontainers&#34; subresource beyond what the default is. They would then need to create a new pod or patch one that they already have access to. This might allow evasion of SCC admission restrictions, thereby gaining control of a privileged pod.</p> https://cve.radiocsirt.org/vuln/cve-2023-1260