Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-25741

Опубликовано: 20 сент. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5.5
CVSS3: 8.1

Описание

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

РелизСтатусПримечание
devel

DNE

esm-apps/focal

not-affected

code not present
esm-apps/jammy

not-affected

code not present
esm-apps/noble

not-affected

code not present
focal

ignored

end of standard support, was needs-triage
jammy

not-affected

code not present
noble

not-affected

code not present
oracular

ignored

end of life, was needs-triage
plucky

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 95%
0.07964
Низкий

5.5 Medium

CVSS2

8.1 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
redhat
около 5 лет назад

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

CVSS3: 8.1
nvd
около 5 лет назад

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

CVSS3: 8.8
msrc
около 1 года назад

Symlink Exchange Can Allow Host Filesystem Access

CVSS3: 8.1
debian
около 5 лет назад

A security issue was discovered in Kubernetes where a user may be able ...

CVSS3: 8.1
github
около 5 лет назад

Files or Directories Accessible to External Parties in kubernetes

EPSS

Процентиль: 95%
0.07964
Низкий

5.5 Medium

CVSS2

8.1 High

CVSS3