Red Hat Security Advisory

RHSA-2023:7709

Red Hat OpenShift for Windows Containers 8.1.1 security update

Released 2023-12-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.13 openshift4-wincw/windows-machine-config-operator-bundle, openshift4-wincw/windows-machine-config-rhel9-operator

Fixes 1 record

TI-2023-05086 CVE-2023-5528 · GHSA-hq6q-c2x6-hmch

Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation

HIGH 73

A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04095 Published 2023-11-14 Fixed in v1.28.4, v1.27.8 +6 CWE-20