CVE-2023-2727

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-2727
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2727.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-2727
Aliases
Downstream
CGA (8)
DEBIAN (1)
OESA (4)
openSUSE (3)
RHSA (2)
SUSE (7)
UBUNTU (1)
Related
openSUSE (3)
SUSE (7)
Published
2023-07-03T20:05:04Z
Modified
2026-10-21T02:49:32Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
Bypassing policies imposed by the ImagePolicyWebhook admission plugin
Details

Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.

Database specific 
{
    "cna_assigner":  "kubernetes",
    "cwe_ids":  [
        "CWE-20"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2727.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "v1.25.0 - v1.25.10"
                        },
                        {
                            "last_affected":  "v1.25.0 - v1.25.10"
                        },
                        {
                            "introduced":  "v1.26.0 - v1.26.5"
                        },
                        {
                            "last_affected":  "v1.26.0 - v1.26.5"
                        },
                        {
                            "introduced":  "v1.27.0 - v1.27.2"
                        },
                        {
                            "last_affected":  "v1.27.0 - v1.27.2"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "StandaloneSingleVersion"
                }
            ]
        },
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "v1.24.14"
                        },
                        {
                            "last_affected":  "<="
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "StandardRange"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/kubernetes/kubelet

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubelet
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
e222ce84c343045e6a50a93a3a71b4d94c72e141
Introduced
d37f045d808033445aaa284ad80454c948b37958
Last Affected
fdaba096539e39e41984eed38de069976b9b07a7
Introduced
202e223fff3b2425eb941c13ff02e10b8e11a568
Last Affected
f516e7be6d15d5e9d21d166435a74c996fbb84c7
Introduced
bc4c2f36af4e19e04b0d09b6fe4d101916a504fb
Last Affected
718179a9d8ea0b27723e4a2ef4c6d18347c0a919
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "1.24.14"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.25.0"
                },
                {
                    "last_affected":  "1.25.10"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.26.0"
                },
                {
                    "last_affected":  "1.26.5"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.27.0"
                },
                {
                    "last_affected":  "1.27.2"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Affected versions

kubernetes-1.*
kubernetes-1.10.0-alpha.0
kubernetes-1.10.0-alpha.1
kubernetes-1.10.0-alpha.2
kubernetes-1.10.0-alpha.3
kubernetes-1.11.0-alpha.0
kubernetes-1.11.0-alpha.1
kubernetes-1.11.0-alpha.2
kubernetes-1.12.0-alpha.0
kubernetes-1.12.0-alpha.1
kubernetes-1.12.0-beta.0
kubernetes-1.13.0-alpha.0
kubernetes-1.24.14
kubernetes-1.25.10
kubernetes-1.26.5
kubernetes-1.27.2
kubernetes-1.9.0-alpha.0
kubernetes-1.9.0-alpha.1
kubernetes-1.9.0-alpha.2
kubernetes-1.9.0-alpha.3
v0.*
v0.24.14
v0.25.10
v0.26.5
v0.27.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2727.json"

Git / github.com/kubernetes/kubernetes

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubernetes
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
0018fa8af8ffaff22f36d3bd86289753ca61da81
Introduced
a866cbe2e5bbaa01cfd5e969aa3e033f3282a8a2
Last Affected
e770bdbb87cccdc2daa790ecd69f40cf4df3cc9d
Introduced
b46a3f887ca979b1a5d14fd39cb1af43e7e5d12d
Last Affected
890a139214b4de1f01543d15003b5bda71aae9c7
Introduced
1b4df30b3cdfeaba6024e81e559a6cd09a089d65
Last Affected
7f6f68fdabc4df88cfea2dcf9a19b2b830f1e647
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "1.24.14"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.25.0"
                },
                {
                    "last_affected":  "1.25.10"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.26.0"
                },
                {
                    "last_affected":  "1.26.5"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.27.0"
                },
                {
                    "last_affected":  "1.27.2"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Affected versions

v0.*
v0.13.1-dev
v0.17.0
v1.*
v1.1.0-alpha.0
v1.1.0-alpha.1
v1.10.0-alpha.0
v1.10.0-alpha.1
v1.10.0-alpha.2
v1.10.0-alpha.3
v1.11.0-alpha.0
v1.11.0-alpha.1
v1.11.0-alpha.2
v1.12.0-alpha.0
v1.12.0-alpha.1
v1.13.0-alpha.0
v1.13.0-alpha.1
v1.13.0-alpha.2
v1.13.0-alpha.3
v1.14.0-alpha.0
v1.14.0-alpha.1
v1.14.0-alpha.2
v1.14.0-alpha.3
v1.15.0-alpha.0
v1.15.0-alpha.1
v1.15.0-alpha.2
v1.15.0-alpha.3
v1.16.0-alpha.0
v1.16.0-alpha.1
v1.16.0-alpha.2
v1.16.0-alpha.3
v1.17.0-alpha.0
v1.17.0-alpha.1
v1.17.0-alpha.2
v1.17.0-alpha.3
v1.18.0-alpha.0
v1.18.0-alpha.1
v1.18.0-alpha.2
v1.18.0-alpha.4
v1.18.0-alpha.5
v1.19.0-alpha.0
v1.19.0-alpha.1
v1.19.0-alpha.2
v1.19.0-alpha.3
v1.19.0-beta.0
v1.19.0-beta.1
v1.19.0-beta.2
v1.2.0-alpha.1
v1.2.0-alpha.2
v1.2.0-alpha.3
v1.2.0-alpha.4
v1.2.0-alpha.5
v1.2.0-alpha.6
v1.2.0-alpha.7
v1.2.0-alpha.8
v1.20.0-alpha.0
v1.20.0-alpha.1
v1.20.0-alpha.2
v1.20.0-alpha.3
v1.20.0-beta.0
v1.20.0-beta.1
v1.20.0-beta.2
v1.21.0-alpha.0
v1.21.0-alpha.1
v1.21.0-alpha.2
v1.21.0-alpha.3
v1.21.0-beta.0
v1.21.0-beta.1
v1.22.0-alpha.0
v1.22.0-alpha.1
v1.22.0-alpha.2
v1.22.0-alpha.3
v1.22.0-beta.0
v1.22.0-beta.1
v1.22.0-beta.2
v1.23.0-alpha.0
v1.23.0-alpha.1
v1.23.0-alpha.2
v1.23.0-alpha.3
v1.23.0-alpha.4
v1.24.0
v1.24.0-alpha.0
v1.24.0-alpha.1
v1.24.0-alpha.2
v1.24.0-alpha.3
v1.24.0-alpha.4
v1.24.0-beta.0
v1.24.0-rc.0
v1.24.0-rc.1
v1.24.1
v1.24.1-rc.0
v1.24.10
v1.24.10-rc.0
v1.24.11
v1.24.11-rc.0
v1.24.12
v1.24.12-rc.0
v1.24.13
v1.24.14
v1.24.2
v1.24.2-rc.0
v1.24.3
v1.24.3-rc.0
v1.24.4
v1.24.4-rc.0
v1.24.5
v1.24.5-rc.0
v1.24.6
v1.24.6-rc.0
v1.24.7
v1.24.7-rc.0
v1.24.8
v1.24.8-rc.0
v1.24.9
v1.24.9-rc.0
v1.25.0
v1.25.0-alpha.0
v1.25.1
v1.25.1-rc.0
v1.25.10
v1.25.2
v1.25.2-rc.0
v1.25.3
v1.25.3-rc.0
v1.25.4
v1.25.4-rc.0
v1.25.5
v1.25.5-rc.0
v1.25.6
v1.25.6-rc.0
v1.25.7
v1.25.7-rc.0
v1.25.8
v1.25.8-rc.0
v1.25.9
v1.26.0
v1.26.1
v1.26.1-rc.0
v1.26.2
v1.26.2-rc.0
v1.26.3
v1.26.3-rc.0
v1.26.4
v1.26.5
v1.27.0
v1.27.1
v1.27.2
v1.3.0-alpha.0
v1.3.0-alpha.1
v1.3.0-alpha.2
v1.3.0-alpha.3
v1.3.0-alpha.4
v1.3.0-alpha.5
v1.4.0-alpha.1
v1.4.0-alpha.2
v1.4.0-alpha.3
v1.5.0-alpha.0
v1.5.0-alpha.1
v1.5.0-alpha.2
v1.6.0-alpha.0
v1.6.0-alpha.1
v1.6.0-alpha.2
v1.6.0-alpha.3
v1.7.0-alpha.0
v1.7.0-alpha.1
v1.7.0-alpha.2
v1.7.0-alpha.3
v1.7.0-alpha.4
v1.8.0-alpha.0
v1.8.0-alpha.1
v1.8.0-alpha.2
v1.8.0-alpha.3
v1.9.0-alpha.0
v1.9.0-alpha.1
v1.9.0-alpha.2
v1.9.0-alpha.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2727.json"