CVE-2023-1943

Published: Oct 11, 2023

Modified: Sep 18, 2024

PUBLISHED

CVSS v3.1

8.0

HIGH

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.

Vendor	Product	Versions
Kubernetes	kops	affected `0 - < 1.25.3` unaffected `1.25.3` affected `1.26.0 - < 1.26.2` unaffected `1.26.2`

CVSS v3.1 Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

issue-tracking

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.