In breve
- CVE-2017-1000056 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda k8s.io/kubernetes, kubernetes (kubernetes).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.8%, superiore al 86.7% delle vulnerabilità.
- Correzione: aggiornare a 1.5.5 o successiva.
| Package | Affected versions | Patched versions |
|---|
| k8s.io/kubernetes Go | ≥ 1.5.0, < 1.5.5
| 1.5.5
|
| kubernetes | = 1.5.0= 1.5.1= 1.5.2= 1.5.3= 1.5.4
| No fix yet |
Description
Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object.
NVD description
Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free