Security Advisory

CVE-2023-5408

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-11-02 02:55:58
Last updated 2025-11-07 09:40:46
Assigner redhat
State PUBLISHED

Description

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the cluster.