Vulnerability Description
Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to version 0.1.3, a ServiceAccount deployed in a Tenant Namespace, when granted with `PATCH` capabilities on its own Namespace, is able to edit it and remove the Owner Reference, breaking the reconciliation of the Capsule Operator and removing all the enforcement like Pod Security annotations, Network Policies, Limit Range and Resource Quota items. An attacker could detach the Namespace from a Tenant that is forbidding starting privileged Pods using the Pod Security labels by removing the OwnerReference, removing the enforcement labels, and being able to start privileged containers that would be able to start a generic Kubernetes privilege escalation. Patches have been released for version 0.1.3. No known workarounds are available.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Clastix | Capsule | < 0.1.3 |
Related Weaknesses (CWE)
References
- https://github.com/clastix/capsule/commit/1df430e71be8c4778c82eca3459978ad7d0b4bPatchThird Party Advisory
- https://github.com/clastix/capsule/commit/75525ac19254b0c5111e34d7985e2be7bc8b1aPatchThird Party Advisory
- https://github.com/clastix/capsule/releases/tag/v0.1.3PatchRelease NotesThird Party Advisory
- https://github.com/clastix/capsule/security/advisories/GHSA-x45c-cvp8-q4fmThird Party Advisory
- https://github.com/clastix/capsule/commit/1df430e71be8c4778c82eca3459978ad7d0b4bPatchThird Party Advisory
- https://github.com/clastix/capsule/commit/75525ac19254b0c5111e34d7985e2be7bc8b1aPatchThird Party Advisory
- https://github.com/clastix/capsule/releases/tag/v0.1.3PatchRelease NotesThird Party Advisory
- https://github.com/clastix/capsule/security/advisories/GHSA-x45c-cvp8-q4fmThird Party Advisory
FAQ
What is CVE-2022-46167?
CVE-2022-46167 is a vulnerability with a CVSS score of 8.8 (HIGH). Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to version 0.1.3, a ServiceAccount deployed in a Tenant Namespace, when granted with `PATCH` capabilities on its own Namespa...
How severe is CVE-2022-46167?
CVE-2022-46167 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-46167?
Check the references section above for vendor advisories and patch information. Affected products include: Clastix Capsule.