CVSS 3.1
6.3 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LCVE-2023-0229
Medium (6.3) in redhat openshift. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in github.com/openshift/apiserver-library-go 0.0.0-20230119093715-30f75d79e424, 0.0.0-20230120221150-cefee9e0162b.
A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context Constraint (SCC) is "runtime/default," allowing users to disable seccomp for pods they can create and modify.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:openshift
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-5465-xc2j-6p84 | Go | github.com/openshift/apiserver-library-go | <0.0.0-20230120221150-cefee9e0162b | 0.0.0-20230120221150-cefee9e0162b |
| GO-2023-1549 | Go | github.com/openshift/apiserver-library-go | <0.0.0-20230119093715-30f75d79e424 | 0.0.0-20230119093715-30f75d79e424 |