Portieris
Monthly
Image policy bypass in IBM Portieris 0.5.0 through 0.14.2 allows remote authenticated attackers to circumvent container image verification controls by exploiting improper authorization of pod owner references (CWE-862). An attacker with low-privilege Kubernetes cluster access can deploy containers from untrusted or unverified images, effectively nullifying the admission controller's entire security enforcement purpose. No public exploit has been identified at time of analysis, but a vendor patch is available via IBM's security advisory.
Image policy bypass in IBM Portieris 0.5.0 through 0.14.2 allows remote authenticated attackers to circumvent container image verification controls by exploiting improper authorization of pod owner references (CWE-862). An attacker with low-privilege Kubernetes cluster access can deploy containers from untrusted or unverified images, effectively nullifying the admission controller's entire security enforcement purpose. No public exploit has been identified at time of analysis, but a vendor patch is available via IBM's security advisory.