Three high-severity Kubernetes vulnerabilities (CVE-2023-3676, CVE-2023-3893, CVE-2023-3955) could allow attackers to execute code remotely and gain control over all Windows nodes in the Kubernetes cluster.
About the vulnerabilities
CVE-2023-3676, discovered by Akamai researcher Tomer Peled, is a command injection vulnerability that can be exploited by applying a malicious YAML file on the cluster.
“The Kubernetes framework uses YAML files
Read more
Tags: Framework, and, Don't miss, Windows, News, Three, RCE, Files, All, security update, CVE, injection, High, malicious, 2023
Related Posts
- WinRAR vulnerable to remote code execution, patch now! (CVE-2023-40477)a
- Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519)a
- Kubernetes Admins Warned to Patch Clusters Against New RCE Vulnsa
- Juniper Networks fixes flaws leading to RCE in firewalls and switchesa
- Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203)a