Описание
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.
Отчет
Red Hat CodeReady Studio 12 is not affected by this flaw because it ships the fabric8 Kubernetes client instead of the affected Java Kubernetes client.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat CodeReady Studio 12 | kubernetes-client | Not affected | ||
| Red Hat Decision Manager 7 | kubernetes-client | Not affected | ||
| Red Hat Fuse 7 | kubernetes-client | Not affected | ||
| Red Hat Integration Camel K 1 | kubernetes-client | Not affected | ||
| Red Hat JBoss Fuse 6 | kubernetes-client | Not affected | ||
| Red Hat Process Automation 7 | kubernetes-client | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1961365kubernetes-client: Loading specially-crafted yaml can lead to code execution
EPSS
Процентиль: 31%
0.00116
Низкий
6.7 Medium
CVSS3
Связанные уязвимости
CVSS3: 6.7
nvd
больше 4 лет назад
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.
EPSS
Процентиль: 31%
0.00116
Низкий
6.7 Medium
CVSS3