漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Kyverno ignores subjectRegExp and IssuerRegExp
Vulnerability Description
Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to version 1.14.0-alpha.1, Kyverno ignores subjectRegExp and IssuerRegExp while verifying artifact's sign with keyless mode. It allows the attacker to deploy kubernetes resources with the artifacts that were signed by unexpected certificate. Deploying these unauthorized kubernetes resources can lead to full compromise of kubernetes cluster. Version 1.14.0-alpha.1 contains a patch for the issue.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
Vulnerability Type
授权机制不恰当
Vulnerability Title
Kyverno 授权问题漏洞
Vulnerability Description
Kyverno是Kyverno开源的一个为 Kubernetes 设计的策略引擎。 Kyverno 1.14.0-alpha.1之前版本存在授权问题漏洞，该漏洞源于在无密钥模式下验证工件签名时忽略subjectRegExp和IssuerRegExp，可能导致部署未经授权的Kubernetes资源，从而完全控制Kubernetes集群。
CVSS Information
N/A
Vulnerability Type
N/A