« Volver al listado

CVE-2025-47283

Estado: ModificadaCrítica (9.9)—

Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 that could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters. `gardener/gardener` (`gardenlet`) is the affected component. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Acceso remoto a servicio de Kubernetes con PR:L permite escalar privilegios (root en seed cluster) e impacta C/I/A críticos. Usuario administrativo del proyecto explota gardenlet remoto para control total del cluster.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Threat Intelligence ProgramApplication Isolation and SandboxingExploit ProtectionUpdate SoftwareVulnerability ScanningPrivileged Account Management

Tecnologías afectadas (1)

Gardener — Gardener

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-47283",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-47283",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-20T13:10:00.494340Z"
        }
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 9.9,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 3.1
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 9.9,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 3.1
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "gardener",
          "product": "gardener",
          "versions": [
            {
              "status": "affected",
              "version": "< 1.116.4"
            },
            {
              "status": "affected",
              "version": ">= 1.117.0, < 1.117.5"
            },
            {
              "status": "affected",
              "version": ">= 1.118.0, < 1.118.2"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-05-19T19:15:51.747",
  "references": [
    {
      "url": "https://github.com/gardener/gardener/commit/924b1575aae052bcda5a51fac8594d38fa3c41b0",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/gardener/gardener/commit/b89cf2cd5067e82f364063d5241af73650a6e11d",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/gardener/gardener/commit/bbd19b1dd3a31843d7b820172d37f75298dfaf8b",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/gardener/gardener/commit/cf4e9887d83902216b85609caf563f7a9dd2de00",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/gardener/gardener/security/advisories/GHSA-3hw7-qj9h-r835",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 that could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters. `gardener/gardener` (`gardenlet`) is the affected component. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue."
    },
    {
      "lang": "es",
      "value": "Gardener implementa la gestión y operación automatizadas de clústeres de Kubernetes como servicio. Se descubrió una vulnerabilidad de seguridad en Gardener anterior a las versiones 1.116.4, 1.117.5, 1.118.2 y 1.119.0 que podría permitir que un usuario con privilegios administrativos en un proyecto de Gardener controle los clústeres de semilla donde se administran sus clústeres de brote. Esta CVE afecta a todas las instalaciones de Gardener, independientemente del proveedor de nube pública utilizado para los clústeres de semilla/brote. El componente afectado es `gardener/gardener` (`gardenlet`). Las versiones 1.116.4, 1.117.5, 1.118.2 y 1.119.0 solucionan el problema."
    }
  ],
  "lastModified": "2026-06-17T09:27:39.887",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gardener:gardener:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "39FD8AE0-9F54-4A0E-B52B-3AAF9C52DC57",
              "versionEndExcluding": "1.116.4"
            },
            {
              "criteria": "cpe:2.3:a:gardener:gardener:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C830032B-8CE1-41CE-BDA5-84E84CB050C3",
              "versionEndExcluding": "1.117.5",
              "versionStartIncluding": "1.117.0"
            },
            {
              "criteria": "cpe:2.3:a:gardener:gardener:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D34463B-C8A7-46D7-9083-2E37BB8C7B9C",
              "versionEndExcluding": "1.118.2",
              "versionStartIncluding": "1.118.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-advisories@github.com"
}