{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Kubernetes ist ein Werkzeug zur Automatisierung der Bereitstellung, Skalierung und Verwaltung von containerisierten Anwendungen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kubernetes ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Dateien zu manipulieren oder Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Linux\n- Windows\n- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-1458 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-1458.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-1458 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1458"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7004197 vom 2023-06-15",
        "url": "https://www.ibm.com/support/pages/node/7004197"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:3609 vom 2023-06-15",
        "url": "https://access.redhat.com/errata/RHSA-2023:3609"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:2292-1 vom 2023-05-25",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-May/014985.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:1655 vom 2023-04-12",
        "url": "https://access.redhat.com/errata/RHSA-2023:1655"
      },
      {
        "category": "external",
        "summary": "Eintrag in der OSS Mailing-list vom 2022-09-18",
        "url": "https://seclists.org/oss-sec/2022/q3/207"
      },
      {
        "category": "external",
        "summary": "Red Hat Bugzilla Bug-ID 2127808 vom 2022-09-18",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2127808"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-9856 vom 2022-10-03",
        "url": "https://linux.oracle.com/errata/ELSA-2022-9856.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-9853 vom 2022-10-06",
        "url": "https://linux.oracle.com/errata/ELSA-2022-9853.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-9854 vom 2022-10-05",
        "url": "https://linux.oracle.com/errata/ELSA-2022-9854.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-10036 vom 2022-11-29",
        "url": "https://linux.oracle.com/errata/ELSA-2022-10036.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-10033 vom 2022-11-30",
        "url": "https://linux.oracle.com/errata/ELSA-2022-10033.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-12011 vom 2023-01-11",
        "url": "https://linux.oracle.com/errata/ELSA-2023-12011.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-12014 vom 2023-01-11",
        "url": "https://linux.oracle.com/errata/ELSA-2023-12014.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-12013 vom 2023-01-11",
        "url": "https://linux.oracle.com/errata/ELSA-2023-12013.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-12012 vom 2023-01-11",
        "url": "https://linux.oracle.com/errata/ELSA-2023-12012.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:7398 vom 2023-01-18",
        "url": "https://access.redhat.com/errata/RHSA-2022:7398"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:9096 vom 2023-01-30",
        "url": "https://access.redhat.com/errata/RHSA-2022:9096"
      }
    ],
    "source_lang": "en-US",
    "title": "Kubernetes: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2023-06-15T22:00:00.000+00:00",
      "generator": {
        "date": "2024-02-15T16:58:36.803+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2022-1458",
      "initial_release_date": "2022-09-18T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-09-18T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2022-10-03T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-10-05T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-11-29T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-01-10T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-01-17T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-01-29T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-04-12T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-05-24T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-06-14T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-06-15T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von IBM aufgenommen"
        }
      ],
      "status": "final",
      "version": "11"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "IBM MQ",
            "product": {
              "name": "IBM MQ",
              "product_id": "T021398",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:mq:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Open Source Kubernetes \u003c v1.25.1",
                "product": {
                  "name": "Open Source Kubernetes \u003c v1.25.1",
                  "product_id": "T024641",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:kubernetes:kubernetes:v1.25.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Open Source Kubernetes \u003c v1.24.5",
                "product": {
                  "name": "Open Source Kubernetes \u003c v1.24.5",
                  "product_id": "T024642",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:kubernetes:kubernetes:v1.24.5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Open Source Kubernetes \u003c v1.23.11",
                "product": {
                  "name": "Open Source Kubernetes \u003c v1.23.11",
                  "product_id": "T024643",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:kubernetes:kubernetes:v1.23.11"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Open Source Kubernetes \u003c v1.22.14",
                "product": {
                  "name": "Open Source Kubernetes \u003c v1.22.14",
                  "product_id": "T024644",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:kubernetes:kubernetes:v1.22.14"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Kubernetes"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift",
                "product": {
                  "name": "Red Hat OpenShift",
                  "product_id": "T008027",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:-"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat OpenShift container platform 4.10",
                "product": {
                  "name": "Red Hat OpenShift container platform 4.10",
                  "product_id": "T027233",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform_4.10"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Data Foundation 4",
                "product": {
                  "name": "Red Hat OpenShift Data Foundation 4",
                  "product_id": "T028133",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:data_foundation_4"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "OpenShift"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-25749",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in Kubernetes. Workloads k\u00f6nnen als \"ContrainerAdministrator\" laufen, obwohl diese explizit als \"Non-Root\" gelabelt sind. Ein authentisierter Angreifer im gleichen Netzbereich kann diese Schwachstellen ausnutzen, um Sicherheitsvorkehrungen zu umgehen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T028133",
          "T008027",
          "T002207",
          "67646",
          "T004914",
          "T021398",
          "T027233"
        ]
      },
      "release_date": "2022-09-18T22:00:00Z",
      "title": "CVE-2021-25749"
    },
    {
      "cve": "CVE-2022-3172",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in Kubernetes. Ein API-Server kann den gesamten Verkehr an eine andere Adresse weiterleiten und dabei Anmeldeinformationen offenlegen. Ein entfernter, authentisierter Angreifer kann diese Schwachstelle ausnutzen, um Dateien zu manipulieren und Informationen offenzulegen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T028133",
          "T008027",
          "T002207",
          "67646",
          "T004914",
          "T021398",
          "T027233"
        ]
      },
      "release_date": "2022-09-18T22:00:00Z",
      "title": "CVE-2022-3172"
    }
  ]
}