« Volver al listado

CVE-2023-1174

Estado: ModificadaCrítica (9.8)—

This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Kubernetes — Minikube

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-1174",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-1174",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-01-16T20:57:26.643088Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "jordan@liggitt.net",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "jordan@liggitt.net",
      "affectedData": [
        {
          "vendor": "Kubernetes",
          "product": "minikube",
          "versions": [
            {
              "status": "affected",
              "version": "1.26.0",
              "lessThan": "unspecified",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "1.28.0"
            }
          ],
          "platforms": [
            "macOS"
          ]
        }
      ]
    }
  ],
  "published": "2023-05-24T17:15:09.733",
  "references": [
    {
      "url": "https://groups.google.com/g/kubernetes-security-announce/c/2ZkJFMDTKbM",
      "tags": [
        "Mailing List"
      ],
      "source": "jordan@liggitt.net"
    },
    {
      "url": "https://groups.google.com/g/kubernetes-security-announce/c/2ZkJFMDTKbM",
      "tags": [
        "Mailing List"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "jordan@liggitt.net",
      "description": [
        {
          "lang": "en",
          "value": "CWE-266"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container."
    }
  ],
  "lastModified": "2026-06-17T05:27:16.860",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kubernetes:minikube:1.26.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C947A326-8671-4B10-B586-32C14E42F0D8"
            },
            {
              "criteria": "cpe:2.3:a:kubernetes:minikube:1.26.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E3E8A841-DF87-4018-8274-2475C9C969AC"
            },
            {
              "criteria": "cpe:2.3:a:kubernetes:minikube:1.27.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D24AF30-3E95-4230-86CC-D993CBF9AE81"
            },
            {
              "criteria": "cpe:2.3:a:kubernetes:minikube:1.27.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7952A75-CB33-4E52-8995-21EAA0DB80F8"
            },
            {
              "criteria": "cpe:2.3:a:kubernetes:minikube:1.28.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62E2C3FA-7F5A-40B6-AE7C-7B3207A0D781"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "jordan@liggitt.net"
}