Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-3893

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy.

Published

2023-11-03T18:15:08.623

Last Modified

2025-08-01T02:05:13.880

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses

Type: Secondary
CWE-20
Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	kubernetes	csi_proxy	≤ 1.1.2	Yes
Application	kubernetes	csi_proxy	2.0.0	Yes

References

https://github.com/kubernetes/kubernetes/issues/119594 Issue Tracking, Vendor Advisory ([email protected])
https://groups.google.com/g/kubernetes-security-announce/c/lWksE2BoCyQ Mailing List ([email protected])
https://security.netapp.com/advisory/ntap-20231221-0004/ Third Party Advisory ([email protected])
https://github.com/kubernetes/kubernetes/issues/119594 Issue Tracking, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://groups.google.com/g/kubernetes-security-announce/c/lWksE2BoCyQ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20231221-0004/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)