CVE-2019-15789

Опубликовано: 08 апр. 2020

Источник: nvd

CVSS3: 8.8

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioning a privileged container. Fixed in MicroK8s 1.15.3.

Ссылки

https://discuss.kubernetes.io/t/explicit-use-of-sudo-in-microk8s-cli/7605
Third Party Advisory
https://github.com/ubuntu/microk8s/pull/590
Third Party Advisory
https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-15789.html
Vendor Advisory
https://pulsesecurity.co.nz/advisories/microk8s-privilege-escalation
Exploit
Third Party Advisory
https://discuss.kubernetes.io/t/explicit-use-of-sudo-in-microk8s-cli/7605
Third Party Advisory
https://github.com/ubuntu/microk8s/pull/590
Third Party Advisory
https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-15789.html
Vendor Advisory
https://pulsesecurity.co.nz/advisories/microk8s-privilege-escalation
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:canonical:microk8s:*:*:*:*:*:*:*:*

Версия до 1.15.3 (исключая)

EPSS

Процентиль: 13%

0.00045

Низкий

8.8 High

CVSS3

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-269

NVD-CWE-noinfo

Связанные уязвимости

CVE-2019-15789

CVSS3: 8.8

ubuntu

больше 5 лет назад

Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioning a privileged container. Fixed in MicroK8s 1.15.3.

GHSA-2fvj-qg75-5fhx

github

больше 3 лет назад

Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioning a privileged container. Fixed in MicroK8s 1.15.3.

EPSS

Процентиль: 13%

0.00045

Низкий

8.8 High

CVSS3

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-269

NVD-CWE-noinfo