« Volver al listado

CVE-2025-47284

Estado: AnalizadaCrítica (9.9)—

Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in the `gardenlet` component of Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0. It could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations where gardener/gardener-extension-provider-gcp is in use. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

AV:N/PR:L sin UI permite T1210. Admin de proyecto obtiene control del seed cluster (escalada a root/admin) y manipulación de cuentas de servicio de Kubernetes.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Threat Intelligence ProgramPrivileged Account ManagementMulti-factor AuthenticationApplication Isolation and SandboxingExploit ProtectionUpdate Software

Tecnologías afectadas (1)

Gardener — Gardener

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-47284",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-47284",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-20T13:03:28.820810Z"
        }
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 9.9,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 3.1
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 9.9,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 3.1
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "gardener",
          "product": "gardener",
          "versions": [
            {
              "status": "affected",
              "version": "< 1.116.4"
            },
            {
              "status": "affected",
              "version": ">= 1.117.0, < 1.117.5"
            },
            {
              "status": "affected",
              "version": ">= 1.118.0, < 1.118.2"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-05-19T19:15:51.870",
  "references": [
    {
      "url": "https://github.com/gardener/gardener/security/advisories/GHSA-9x73-87fh-54w9",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-150"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in the `gardenlet` component of Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0. It could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations where gardener/gardener-extension-provider-gcp is in use. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue."
    },
    {
      "lang": "es",
      "value": "Gardener implementa la gestión y operación automatizadas de clústeres de Kubernetes como servicio. Se descubrió una vulnerabilidad de seguridad en el componente `gardenlet` de Gardener en versiones anteriores a la 1.116.4, 1.117.5, 1.118.2 y 1.119.0. Esta vulnerabilidad podría permitir que un usuario con privilegios administrativos en un proyecto de Gardener controle los clústeres de semillas donde se gestionan sus clústeres de brotes. Esta CVE afecta a todas las instalaciones de Gardener donde se utiliza gardener/gardener-extension-provider-gcp. Las versiones 1.116.4, 1.117.5, 1.118.2 y 1.119.0 solucionan el problema."
    }
  ],
  "lastModified": "2026-06-17T09:27:39.997",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gardener:gardener:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "39FD8AE0-9F54-4A0E-B52B-3AAF9C52DC57",
              "versionEndExcluding": "1.116.4"
            },
            {
              "criteria": "cpe:2.3:a:gardener:gardener:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C830032B-8CE1-41CE-BDA5-84E84CB050C3",
              "versionEndExcluding": "1.117.5",
              "versionStartIncluding": "1.117.0"
            },
            {
              "criteria": "cpe:2.3:a:gardener:gardener:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D34463B-C8A7-46D7-9083-2E37BB8C7B9C",
              "versionEndExcluding": "1.118.2",
              "versionStartIncluding": "1.118.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-advisories@github.com"
}