Gardener External DNS Management Privilege Escalation Vulnerability

A critical vulnerability exists in Gardener External DNS Management versions prior to 0.23.6, allowing users with administrative rights in a Gardener project or a shoot cluster (including single namespace admin rights) to gain control over the seed cluster managing the shoot cluster. This issue affects all Gardener installations, regardless of the public cloud provider used for seed or shoot clusters. The vulnerability arises from improper management of administrative privileges, potentially leading to unauthorized control over the seed cluster.

Impact

Exploitation of this vulnerability could result in unauthorized control over the seed cluster, allowing for privilege escalation and management of resources in the affected environment.

Remediation

Users are advised to update Gardener External DNS Management to version 0.23.6 or later. If the 'gardener/gardener-extension-shoot-dns-service' extension is enabled, update to version 1.60.1 or later.