CVE-2023-27593

Katalog CVE

CVSS 5.5 · Medium EPSS 0,22%

Kerentanan Incorrect Default Permissions pada cilium. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, an attacker with access to a Cilium agent pod can write to `/opt/cni/bin` due to a `hostPath` mount of that directory in the agent pod. By replacing the CNI binary with their own malicious binary and waiting for the creation of a new pod on the node, the attacker can gain access to the underlying node. The issue has been fixed and the fix is available on versions 1.11.15, 1.12.8, and 1.13.1. Some workarounds are available. Kubernetes RBAC should be used to deny users and service accounts `exec` access to Cilium agent pods. In cases where a user requires `exec` access to Cilium agent pods, but should not have access to the underlying node, no workaround is possible.

Rincian

Terbit di NVD

17 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-276: Incorrect Default Permissions

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/cilium/cilium/pull/24075 advisory pihak ketiga
• https://github.com/cilium/cilium/releases/tag/v1.11.15 advisory pihak ketiga
• https://github.com/cilium/cilium/releases/tag/v1.12.8 advisory pihak ketiga
• https://github.com/cilium/cilium/releases/tag/v1.13.1 advisory pihak ketiga
• https://github.com/cilium/cilium/security/advisories/GHSA-4hc4-pgfx-3mrx advisory pihak ketiga
• https://kubernetes.io/docs/reference/access-authn-authz/rbac/ advisory pihak ketiga