CVE-2023-2727

Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.

• CWE-20

• http://www.openwall.com/lists/oss-security/2023/07/06/2Mailing List, Third Party Advisory
• https://github.com/kubernetes/kubernetes/issues/118640Issue Tracking
• https://groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8Mailing List
• https://security.netapp.com/advisory/ntap-20230803-0004/
• http://www.openwall.com/lists/oss-security/2023/07/06/2Mailing List, Third Party Advisory
• https://github.com/kubernetes/kubernetes/issues/118640Issue Tracking
• https://groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8Mailing List
• https://security.netapp.com/advisory/ntap-20230803-0004/

Published

Jul 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-27264A missing permissions check in Mattermost Playbooks in Matte…6.5
• CVE-2023-27265Mattermost fails to honor the ShowEmailAddress setting when …2.7
• CVE-2023-27266Mattermost fails to honor the ShowEmailAddress setting when …2.7
• CVE-2023-27267Due to missing authentication and insufficient input validat…8.1
• CVE-2023-27268SAP NetWeaver AS Java (Object Analyzing Service) - version 7…5.3
• CVE-2023-27269SAP NetWeaver Application Server for ABAP and ABAP Platform …9.6
• CVE-2023-27270SAP NetWeaver Application Server for ABAP and ABAP Platform …6.5
• CVE-2023-27271In SAP BusinessObjects Business Intelligence Platform (Web S…7.5
• CVE-2023-27272IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to b…8.8
• CVE-2023-27279IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a user to …6.5
• CVE-2023-2728Users may be able to launch containers that bypass the mount…6.5
• CVE-2023-27283IBM Aspera Orchestrator 4.0.1 could allow a remote attacker …5.3