Beveiligingsadvies

CVE-2025-29778

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-24 16:38:08

Laatst bijgewerkt 2025-03-24 17:55:28

Toegewezen door GitHub_M

CVSS-score 5.8

Status PUBLISHED

Beschrijving

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to version 1.14.0-alpha.1, Kyverno ignores subjectRegExp and IssuerRegExp while verifying artifact's sign with keyless mode. It allows the attacker to deploy kubernetes resources with the artifacts that were signed by unexpected certificate. Deploying these unauthorized kubernetes resources can lead to full compromise of kubernetes cluster. Version 1.14.0-alpha.1 contains a patch for the issue.

← Alle CVE's bekijken Bekijk op cve.org ↗