← voltar
CVE-2018-1002100

CVE-2018-1002100

CVSS 4.2 MEDIUMEPSS 1.6%
In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary local files.
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N
Produtos afetados
Kubernetes · Kubernetes

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://bugzilla.redhat.com/show_bug.cgi?id=1564305https://github.com/kubernetes/kubernetes/issues/61297https://hansmi.ch/articles/2018-04-openshift-s2i-security