En resumen
- CVE-2016-1905 es una vulnerabilidad ALTO (CVSS 7.7) que afecta a github.com/kubernetes/kubernetes.
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.6%, mayor que el 75.6% de las vulnerabilidades.
- Solución: actualizar a 1.2.0-alpha.6 o posterior.
Description
The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.
Specific Go Packages Affected
github.com/kubernetes/kubernetes/pkg/apiserver
NVD description
The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.
Más vulnerabilidades de github.com/kubernetes/kubernetes
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free