CVE-2023-33191
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
Kyverno is a policy engine designed for Kubernetes. Seccomp control in Kyverno can be circumvented, affecting users of the `validate.podSecurity` subrule in versions 1.9.2 and 1.9.3. This issue was patched in version 1.9.4.
Risk Assessment
Organizations using the vulnerable versions of Kyverno may be exposed to unauthorized access to containers, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade Kyverno to version 1.9.4 or later to mitigate this vulnerability.
Original NVD description (English source)
Kyverno is a policy engine designed for Kubernetes. Kyverno seccomp control can be circumvented. Users of the podSecurity `validate.podSecurity` subrule in Kyverno 1.9.2 and 1.9.3 are vulnerable. This issue was patched in version 1.9.4.