Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-1002102

Опубликовано: 13 мар. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.3
CVSS3: 7.1

Описание

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running.

РелизСтатусПримечание
artful

DNE

devel

not-affected

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

needs-triage

xenial

DNE

Показывать по

EPSS

Процентиль: 56%
0.00345
Низкий

6.3 Medium

CVSS2

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
redhat
больше 7 лет назад

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running.

CVSS3: 7.1
nvd
больше 7 лет назад

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running.

CVSS3: 7.1
debian
больше 7 лет назад

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to version ...

CVSS3: 5.6
github
около 3 лет назад

Kubernetes arbitrary file overwrite

oracle-oval
больше 7 лет назад

ELSA-2018-4061: kubernetes security update (IMPORTANT)

EPSS

Процентиль: 56%
0.00345
Низкий

6.3 Medium

CVSS2

7.1 High

CVSS3