CTF Platform Fullchain Network Policy Misconfiguration Vulnerability Allowing Namespace Pivoting

A vulnerability in the Fullchain CTF platform, in versions prior to 0.1.1, allows a malicious actor to pivot from a compromised application to any Pod in a different namespace. This issue arises from a misconfigured NetworkPolicy that fails to enforce proper isolation between namespaces, breaking the expected security defaults and potentially enabling lateral movement within the cluster.

Impact

Exploitation of this vulnerability could lead to unauthorized access to Pods in other namespaces, allowing for potential lateral movement and access to sensitive resources or data.

Remediation

To address this vulnerability, delete the incorrect 'inter-ns' NetworkPolicy in the affected namespace. This can be done manually or with a provided script that removes all matching NetworkPolicies. After deleting the problematic policy, update to Fullchain version 0.1.1 as soon as possible.