[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIc2JZuzafLnzb9DE8FBQM9qSB27PYTwywxGH-IX53GY":3,"g5a-risk:CVE-2023-3027":118},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":48,"references":49,"referencesCount":58,"weaknesses":59,"weaknessesCount":58,"isActivelyExploited":74,"cisaInfo":26,"otxData":26,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":113,"notableEvents":114},"CVE-2023-3027","What is CVE-2023-3027?","The grc-policy-propagator allows security escalation within the cluster. The propagator allows policies which contain some dynamically obtained values (instead of the policy apply a static manifest on a managed cluster) of taking advantage of cluster scoped access in a created policy. This feature does not restrict properly to lookup content from the namespace where the policy was created.","The grc-policy-propagator allows security escalation within the cluster. The propagator allows policies which contain some dynamically obtained values (inste...","2023-06-05T22:15:12.293","2025-01-08T17:15:13.653",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00198,[33,33,33,33,33,33,33],"High",[37,42,45],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"redhat","advanced_cluster_management_for_kubernetes","2.5","cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:2.5:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"2.6","cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:2.6:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":46,"criteria":47,"vulnerable":4},"2.7","cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:2.7:*:*:*:*:*:*:*",3,[50,56],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2211468#c0","Red Hat",[54,55],"Issue Tracking","Vendor Advisory",{"url":51,"source":52,"tags":57},[54,55],2,[60,68],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":66,"structure":67},"CWE-863","Incorrect Authorization","The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are incorrectly applied, users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Incomplete",false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2023-3027? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-3027, a high severity cyber security vulnerability from 2023. The grc-policy-propagator allows security escalation within ...","CVE-2023-3027, CVE-2023-3027 vulnerability, CVE-2023-3027 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, redhat security, advanced_cluster_management_for_kubernetes vulnerability","\u002Fwhat-is\u002Fcve-2023-3027",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-3027","Cybersecurity","CVE-2023-3027, CVE-2023-3027 vulnerability, CVE-2023-3027 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":26,"Negate":26,"Nodes":103},[104],{"Operator":105,"Negate":26,"CPEMatch":106},"OR",[107,109,111],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":108,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"197BE970-ABE7-44E9-A4E9-E8DB098DAABF",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5139FE24-948C-4E38-B8BB-7C176D19309C",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":112,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"324C9591-3472-472E-9445-176388966FEC",[],[],{"lastModified":11,"cacheTime":116,"version":117},1792264671995,"2.0",{"score":119,"band":120,"action":121,"scoredAt":122},45,"Medium","Plan remediation","2026-10-16T06:58:12.204116+00:00"]