Vulnetix
Try Vulnetix Request Demo
CVE-2017-1002102 PUBLISHED CVSS 7.1 HIGH

Reported by kubernetes · Published March 13, 2018

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running.

Risk Scores

CVSS v3.0
7.1
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected Products

VendorProductVersions
KubernetesKubernetesv1.3.x, v1.4.x, v1.5.x
k8s.iokubernetes1.3, 1.7.0, 1.8.0
github.comkubernetes/kubernetesv1.3.0, v1.4.0, v1.5.0
KubernetesKubernetesv1.3.x, v1.4.x, v1.5.x

Timeline

References

Open in Interactive Console →