Advisories · Technology
Kubernetes.
Every CVE that names Kubernetes among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.9 Medium
StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation
- Kubernetes
- Broken access control
- CVSS 5.8 Medium
Subpath symlinking on Windows nodes permits NTLM coercion
- Kubernetes
- Path traversal
- CVSS 6.5 Medium
Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes
- Kubernetes
- Path traversal
- CVSS 4.4 Medium
Openshift api admission checks does not enforce "custom-host" permissions
- kubernetes
- Red Hat Advanced Cluster Management for Kubernetes 2
- Broken access control
- CVSS 7.8 High
runAsNonRoot logic bypass for Windows containers
- Kubernetes
- Broken access control
- CVSS 5.9 Medium
Credential leakage when failing to mount
- Kubernetes
- Information disclosure
- CVSS 2.6 Low
Kubernetes API server follows unvalidated redirects from streaming Kubelet endpoints
- Kubernetes
- Open redirect
- CVSS 4.8 Medium
kubectl cp allows symlink directory traversal
- Kubernetes
- CWE-61
- CVSS 6.5 Medium
Kubernetes kubelet exposes /debug/pprof info on healthz port
- Kubernetes
- CWE-419
- CVSS 6.4 Medium
kubectl cp allows symlink directory traversal
- Kubernetes
- CWE-61
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Kubernetes: In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14…
- Kubernetes
-
Kubernetes: Default access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure…
- Kubernetes