CVE-2023-5408 HIGH

CVE-2023-5408: Openshift: modification of node role labels

Weakness CWE-269
Published November 2, 2023
Last update November 7, 2025
View on NVD All CVEs

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the cluster.

Key dates

02Disclosure timeline

November 2, 2023 CVE published
November 7, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-4335 Woocommerce Multiple Addresses <= 1.0.7.1 - Authenticated (Subscriber+) Privilege Escalation CVE-2023-6099 Shenzhen Youkate Industrial Facial Love Cloud Payment System Account SystemMng.ashx privileges management CVE-2021-34745 AppDynamics .NET Agent Privilege Escalation Vulnerability CVE-2017-20078 Hindu Matrimonial Script featured.php privileges management CVE-2026-5193 Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user