Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-5187

Опубликовано: 27 авг. 2025
Источник: nvd
CVSS3: 6.7
EPSS Низкий

Описание

A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.

EPSS

Процентиль: 4%
0.00021
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.7
ubuntu
2 месяца назад

A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.

CVSS3: 6.7
redhat
3 месяца назад

A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.

CVSS3: 6.7
debian
2 месяца назад

A vulnerability exists in the NodeRestriction admission controller in ...

CVSS3: 6.7
github
2 месяца назад

Kubernetes Nodes can delete themselves by adding an OwnerReference

CVSS3: 6.7
fstec
3 месяца назад

Уязвимость плагина NodeRestriction сервера kube-apiserver программного средства управления кластерами виртуальных машин Kubernetes, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 4%
0.00021
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-863