Lucene search
RedhatCVELIST:CVE-2023-3027HistoryJun 05, 2023 - 12:00 a.m.
CVE-2023-3027
2023-06-0500:00:00
CWE-269
redhat
www.cve.org
grc-policy-propagator
security escalation
cluster scoped access
0.0004 Low
EPSS
Percentile
9.2%
The grc-policy-propagator allows security escalation within the cluster. The propagator allows policies which contain some dynamically obtained values (instead of the policy apply a static manifest on a managed cluster) of taking advantage of cluster scoped access in a created policy. This feature does not restrict properly to lookup content from the namespace where the policy was created.
CNA Affected
[
{
"vendor": "n/a",
"product": "RHACM",
"versions": [
{
"version": "2.5, 2.6, 2.7",
"status": "affected"
}
]
}
]Related
cve
cve
CVE-2023-3027
2023-06-05 22:15:12
prion
prion
Code injection
2023-06-05 22:15:00
redhatcve
redhatcve
CVE-2023-3027
2023-06-01 04:07:47
nvd
nvd
CVE-2023-3027
2023-06-05 22:15:12
veracode
veracode
Privilege Escalation
2023-06-19 09:37:04
redhat
redhat