PT-2023-2327 · Minikube · Minikube

CVE-2023-1174

·

Publicado

2023-04-12

·

Atualizado

2023-05-31

CVSS v2.0

10

Crítica

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions minikube (affected versions not specified)
Description The issue is related to information disclosure in the minikube tool, which could allow a remote attacker to gain access to the container. Specifically, it exposes a network port in minikube running on macOS with the Docker driver, potentially enabling unexpected remote access to the minikube container.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Incorrect Privilege Assignment

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-02092
CVE-2023-1174

Produtos afetados

Minikube