[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEh-_mQih8_xs_WNuPLm8fXAkIxTGyiSj8li2C2UQNb8":3,"g5a-risk:CVE-2023-1260":152},{"success":4,"data":5,"meta":149},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":25,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":55,"references":56,"referencesCount":89,"weaknesses":90,"weaknessesCount":99,"isActivelyExploited":100,"cisaInfo":25,"otxData":25,"relatedBlogPosts":101,"seoMetadata":102,"configurations":127,"relatedVendorCves":147,"notableEvents":148},"CVE-2023-1260","What is CVE-2023-1260?","An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions \"update, patch\" the \"pods\u002Fephemeralcontainers\" subresource beyond what the default is. They would then need to create a new pod or patch one that they already have access to. This might allow evasion of SCC admission restrictions, thereby gaining control of a privileged pod.","An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissio...","2023-09-24T01:15:42.707","2024-05-03T16:15:10.33",8,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":25,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","CHANGED",null,1.3,6,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"secalert@redhat.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},0.01556,[32,32,32,32,32,32,32],"High",[36,41,46,49,52],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"kubernetes","kube-apiserver","-","cpe:2.3:a:kubernetes:kube-apiserver:-:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"redhat","openshift_container_platform","4.10","cpe:2.3:a:redhat:openshift_container_platform:4.10:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":47,"criteria":48,"vulnerable":4},"4.11","cpe:2.3:a:redhat:openshift_container_platform:4.11:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":50,"criteria":51,"vulnerable":4},"4.12","cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":53,"criteria":54,"vulnerable":4},"4.13","cpe:2.3:a:redhat:openshift_container_platform:4.13:*:*:*:*:*:*:*",5,[57,62,65,68,71,74,77,81,85],{"url":58,"source":59,"tags":60},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:3976","Red Hat",[61],"Third Party Advisory",{"url":63,"source":59,"tags":64},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:4093",[61],{"url":66,"source":59,"tags":67},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:4312",[61],{"url":69,"source":59,"tags":70},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:4898",[61],{"url":72,"source":59,"tags":73},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:5008",[],{"url":75,"source":59,"tags":76},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2023-1260",[61],{"url":78,"source":59,"tags":79},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2176267",[80,61],"Issue Tracking",{"url":82,"source":83,"tags":84},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-92hx-3mh6-hc49","GitHub",[],{"url":86,"source":87,"tags":88},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20231020-0010\u002F","Netapp",[61],9,[91],{"id":92,"name":93,"description":94,"extendedDescription":95,"status":96,"abstraction":97,"structure":98},"CWE-288","Authentication Bypass Using an Alternate Path or Channel","A product requires authentication, but the product has an alternate path or channel that does not require authentication.","","Incomplete","Base","Simple",1,false,[],{"title":103,"metaDescription":104,"keywords":105,"canonicalUrl":106,"structuredData":107},"What is CVE-2023-1260? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-1260, a high severity cyber security vulnerability from 2023. An authentication bypass vulnerability was discovered in kub...","CVE-2023-1260, CVE-2023-1260 vulnerability, CVE-2023-1260 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, kubernetes security, redhat security, kube-apiserver vulnerability, openshift_container_platform vulnerability","\u002Fwhat-is\u002Fcve-2023-1260",{"@context":108,"@type":109,"headline":103,"description":104,"datePublished":10,"dateModified":11,"author":110,"publisher":114,"about":118,"mainEntityOfPage":122,"articleSection":125,"keywords":126},"https:\u002F\u002Fschema.org","TechArticle",{"@type":111,"name":112,"url":113},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":111,"name":112,"url":113,"logo":115},{"@type":116,"url":117},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":119,"name":6,"description":120,"additionalType":121},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":123,"@id":124},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-1260","Cybersecurity","CVE-2023-1260, CVE-2023-1260 vulnerability, CVE-2023-1260 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[128,135],{"Operator":25,"Negate":25,"Nodes":129},[130],{"Operator":131,"Negate":25,"CPEMatch":132},"OR",[133],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":134,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"58A67EBB-3567-46AD-9EF2-8DA8DBABBA03",{"Operator":25,"Negate":25,"Nodes":136},[137],{"Operator":131,"Negate":25,"CPEMatch":138},[139,141,143,145],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":140,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"0595C9F8-9C7A-4FC1-B7EE-52978A1B1E93",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":142,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"EA983F8C-3A06-450A-AEFF-9429DE9A3454",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":144,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"40449571-22F8-44FA-B57B-B43F71AB25E2",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":146,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"1FFF1D51-ABA8-4E54-B81C-A88C8A5E4842",[],[],{"lastModified":11,"cacheTime":150,"version":151},1792350479204,"2.0",{"score":153,"band":154,"action":155,"scoredAt":156},48,"Medium","Plan remediation","2026-10-16T06:59:15.313421+00:00"]