Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Kubernetes — RHSA-2018:0475 Clear all filters
TI-2017-14756 CVE-2017-1002102 · GHSA-mm7g-f2gg-cw8g

Improper access control in Kubernetes

Priority LOW 33

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories fr…

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.01101 Published 2018-03-13 Partial fix · v1.7.14, v1.8.9 +4 CWE-284
TI-2017-14755 CVE-2017-1002101 · GHSA-rqgw-vh6p-qf7j

Link following in Kubernetes

Priority MEDIUM 56

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can…

CVSS 3.0CRITICAL 9.6 Network Low privileges No interaction EPSS 0.13267 Published 2018-03-13 Partial fix · v1.7.14, v1.8.9 +1 CWE-59