March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
IcedID Banking Trojan aka BokBot – Active IOCs
October 22, 2023
Rewterz Threat Advisory – CVE-2023-44483 – Apache Santuario Vulnerability
October 22, 2023
IcedID Banking Trojan aka BokBot – Active IOCs
October 22, 2023
Rewterz Threat Advisory – CVE-2023-44483 – Apache Santuario Vulnerability
October 22, 2023
Severity
High
Analysis Summary
CVE-2023-3676 CVSS:8.8
Kubernetes could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper input validation on Windows nodes. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain admin privileges.
CVE-2023-3893 CVSS:8.8
Kubernetes could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper input validation on kubernetes-csi-proxy. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain admin privileges.
CVE-2023-3955 CVSS:8.8
Kubernetes could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper input validation on Windows nodes. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain admin privileges.
Impact
- Privilege Escalation
Indicators Of Compromise
CVE
- CVE-2023-3676
- CVE-2023-3893
- CVE-2023-3955
Affected Vendors
Kubernetes
Affected Products
- Kubernetes kubelet 1.25.12
- Kubernetes kubelet 1.24.16
- Kubernetes kubelet 1.26.7
- Kubernetes kubelet 1.28.0
- Kubernetes kubelet 1.27.4
Remediation
Refer to Kubernetes GIT Repository for patch, upgrade or suggested workaround information.