CVE-2023-1943 - Vulnerability Details - OpenCVE

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Kubernetes	Kops Operations

Configuration 1 [-]

OR	cpe:2.3:a:kubernetes:operations::::::::
	cpe:2.3:a:kubernetes:operations::::::::

No data.

References

Link	Providers
https://github.com/kubernetes/kops/issues/15539
https://groups.google.com/g/kubernetes-security-announce/c/yrCE1x89oaU
https://nvd.nist.gov/vuln/detail/CVE-2023-1943
https://www.cve.org/CVERecord?id=CVE-2023-1943

History

Wed, 18 Sep 2024 15:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Kubernetes kops
CPEs		cpe:2.3:o:kubernetes:kops::::::::
Vendors & Products		Kubernetes kops
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: kubernetes

Published: 2023-10-11T23:01:50.876Z

Updated: 2024-09-18T15:06:31.946Z

Reserved: 2023-04-07T20:38:48.430Z

Link: CVE-2023-1943

Vulnrichment

Updated: 2024-08-02T06:05:27.089Z

NVD

Status : Modified

Published: 2023-10-12T00:15:10.067

Modified: 2024-11-21T07:40:11.810

Link: CVE-2023-1943

Redhat

Severity : Important

Publid Date: 2023-06-21T16:00:00Z

Links: CVE-2023-1943 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-1943", "assignerOrgId": "a6081bf6-c852-4425-ad4f-a67919267565", "state": "PUBLISHED", "assignerShortName": "kubernetes", "dateReserved": "2023-04-07T20:38:48.430Z", "datePublished": "2023-10-11T23:01:50.876Z", "dateUpdated": "2024-09-18T15:06:31.946Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a6081bf6-c852-4425-ad4f-a67919267565", "shortName": "kubernetes", "dateUpdated": "2023-10-11T23:01:50.876Z"}, "title": "Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode", "datePublic": "2023-06-21T18:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-250", "description": "CWE-250: Execution with Unnecessary Privileges", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "affected": [{"vendor": "Kubernetes", "product": "kops", "repo": "https://github.com/kubernetes/kops", "versions": [{"status": "affected", "version": "0", "lessThan": "1.25.3", "versionType": "semver"}, {"status": "unaffected", "version": "1.25.3"}, {"status": "affected", "version": "1.26.0", "lessThan": "1.26.2", "versionType": "semver"}, {"status": "unaffected", "version": "1.26.2"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.\n", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.<br>"}]}], "references": [{"url": "https://github.com/kubernetes/kops/issues/15539", "tags": ["issue-tracking"]}, {"url": "https://groups.google.com/g/kubernetes-security-announce/c/yrCE1x89oaU", "tags": ["mailing-list"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8, "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "credits": [{"lang": "en", "value": "James Cleverley-Prance", "user": "00000000-0000-4000-9000-000000000000", "type": "reporter"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T06:05:27.089Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/kubernetes/kops/issues/15539", "tags": ["issue-tracking", "x_transferred"]}, {"url": "https://groups.google.com/g/kubernetes-security-announce/c/yrCE1x89oaU", "tags": ["mailing-list", "x_transferred"]}]}, {"affected": [{"vendor": "kubernetes", "product": "kops", "cpes": ["cpe:2.3:o:kubernetes:kops:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "1.25.4", "versionType": "custom"}, {"version": "1.26.0", "status": "affected", "lessThan": "1.26.2", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-18T14:53:20.240499Z", "id": "CVE-2023-1943", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-18T15:06:31.946Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/kubernetes/kops/issues/15539", "tags": ["issue-tracking", "x_transferred"]}, {"url": "https://groups.google.com/g/kubernetes-security-announce/c/yrCE1x89oaU", "tags": ["mailing-list", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T06:05:27.089Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-1943", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-18T14:53:20.240499Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:kubernetes:kops:*:*:*:*:*:*:*:*"], "vendor": "kubernetes", "product": "kops", "versions": [{"status": "affected", "version": "0", "lessThan": "1.25.4", "versionType": "custom"}, {"status": "affected", "version": "1.26.0", "lessThan": "1.26.2", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-18T15:05:06.568Z"}}], "cna": {"title": "Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "James Cleverley-Prance"}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/kubernetes/kops", "vendor": "Kubernetes", "product": "kops", "versions": [{"status": "affected", "version": "0", "lessThan": "1.25.3", "versionType": "semver"}, {"status": "unaffected", "version": "1.25.3"}, {"status": "affected", "version": "1.26.0", "lessThan": "1.26.2", "versionType": "semver"}, {"status": "unaffected", "version": "1.26.2"}], "defaultStatus": "unaffected"}], "datePublic": "2023-06-21T18:00:00.000Z", "references": [{"url": "https://github.com/kubernetes/kops/issues/15539", "tags": ["issue-tracking"]}, {"url": "https://groups.google.com/g/kubernetes-security-announce/c/yrCE1x89oaU", "tags": ["mailing-list"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.\n", "supportingMedia": [{"type": "text/html", "value": "Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-250", "description": "CWE-250: Execution with Unnecessary Privileges"}]}], "providerMetadata": {"orgId": "a6081bf6-c852-4425-ad4f-a67919267565", "shortName": "kubernetes", "dateUpdated": "2023-10-11T23:01:50.876Z"}}}, "cveMetadata": {"cveId": "CVE-2023-1943", "state": "PUBLISHED", "dateUpdated": "2024-09-18T15:06:31.946Z", "dateReserved": "2023-04-07T20:38:48.430Z", "assignerOrgId": "a6081bf6-c852-4425-ad4f-a67919267565", "datePublished": "2023-10-11T23:01:50.876Z", "assignerShortName": "kubernetes"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:kubernetes:operations:*:*:*:*:*:*:*:*", "matchCriteriaId": "5488C983-38DD-4787-9956-C68D528D5ED1", "versionEndExcluding": "1.25.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:kubernetes:operations:*:*:*:*:*:*:*:*", "matchCriteriaId": "763C648A-9C2F-4697-AC4A-5897EDA1966E", "versionEndExcluding": "1.26.2", "versionStartIncluding": "1.26.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.\n"}, {"lang": "es", "value": "Escalada de privilegios en kOps utilizando el proveedor GCE/GCP en modo Gossip."}], "id": "CVE-2023-1943", "lastModified": "2024-11-21T07:40:11.810", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "jordan@liggitt.net", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-10-12T00:15:10.067", "references": [{"source": "jordan@liggitt.net", "tags": ["Issue Tracking"], "url": "https://github.com/kubernetes/kops/issues/15539"}, {"source": "jordan@liggitt.net", "tags": ["Mailing List"], "url": "https://groups.google.com/g/kubernetes-security-announce/c/yrCE1x89oaU"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking"], "url": "https://github.com/kubernetes/kops/issues/15539"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "https://groups.google.com/g/kubernetes-security-announce/c/yrCE1x89oaU"}], "sourceIdentifier": "jordan@liggitt.net", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-250"}], "source": "jordan@liggitt.net", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}