This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.
{
"cna_assigner": "kubernetes",
"unresolved_ranges": [
{
"source": "AFFECTED_FIELD",
"extracted_events": [
{
"introduced": "1.26.0"
},
{
"last_affected": "1.26.0"
},
{
"last_affected": "1.28.0"
}
]
}
],
"cwe_ids": [
"CWE-266"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1174.json"
}{
"cpe": [
"cpe:2.3:a:kubernetes:minikube:1.26.0:*:*:*:*:*:*:*",
"cpe:2.3:a:kubernetes:minikube:1.26.1:*:*:*:*:*:*:*",
"cpe:2.3:a:kubernetes:minikube:1.27.0:*:*:*:*:*:*:*",
"cpe:2.3:a:kubernetes:minikube:1.27.1:*:*:*:*:*:*:*",
"cpe:2.3:a:kubernetes:minikube:1.28.0:*:*:*:*:*:*:*"
],
"source": "CPE_STRING",
"extracted_events": [
{
"introduced": "1.26.0"
},
{
"last_affected": "1.26.0"
},
{
"introduced": "1.26.1"
},
{
"last_affected": "1.26.1"
},
{
"introduced": "1.27.0"
},
{
"last_affected": "1.27.0"
},
{
"introduced": "1.27.1"
},
{
"last_affected": "1.27.1"
},
{
"introduced": "1.28.0"
},
{
"last_affected": "1.28.0"
}
]
}