CVE-2023-0229
Improper input validation in github.com/openshift/apiserver-library-go
6.3
MEDIUM
CVSS 3.1
EPSS 0.48%
Description
Low-privileged users can set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context Constraint (SCC) is "runtime/default," allowing users to disable seccomp for pods they can create and modify.
How to fix CVE-2023-0229
To remediate CVE-2023-0229, upgrade the affected package to a fixed version below.
- —upgrade to 0.0.0-20230120221150-cefee9e0162b or later
- —upgrade to 0.0.0-20230119093715-30f75d79e424 or later
Is CVE-2023-0229 being exploited?
Low — EPSS is 0.5%, meaning exploitation activity has not been observed at scale.
Affected packages (2)
- from 0, < 0.0.0-20230120221150-cefee9e0162b
- from 0, < 0.0.0-20230119093715-30f75d79e424
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |