CVE-2023-22480

Source
https://nvd.nist.gov/vuln/detail/CVE-2023-22480
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-22480.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-22480
Aliases
Related
Published
2023-01-14T01:15:15Z
Modified
2025-01-08T14:37:47.708670Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

KubeOperator is an open source Kubernetes distribution focused on helping enterprises plan, deploy and operate production-level K8s clusters. In KubeOperator versions 3.16.3 and below, API interfaces with unauthorized entities and can leak sensitive information. This vulnerability could be used to take over the cluster under certain conditions. This issue has been patched in version 3.16.4.

References

Affected packages

Git / github.com/kubeoperator/kubeoperator

Affected ranges

Type
GIT
Repo
https://github.com/kubeoperator/kubeoperator
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Fixed

Affected versions

2.*

2.1.42

v1.*

v1.0

v2.*

v2.0
v2.1.36
v2.1.56
v2.2.28
v2.2.32
v2.2.35
v2.2.55
v2.2.61
v2.2.74
v2.3.22
v2.3.25
v2.4.30

v3.*

v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.1.0
v3.1.1
v3.10.0
v3.10.1
v3.11.0
v3.11.1
v3.11.2
v3.13.0
v3.14.0
v3.15.0
v3.15.1
v3.16.0
v3.16.1
v3.16.2
v3.16.3
v3.2.0
v3.3.0
v3.3.1
v3.4.0
v3.4.1
v3.5.0
v3.5.1
v3.5.2
v3.6.0
v3.7.0
v3.7.1
v3.7.2
v3.8.0
v3.9.0