The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Kubernetes | — | Upgrade Kubernetes to version 1.2.0 | Jun 14, 2018 | Feb 3, 2016 |
| Redhat Openshift | — | Upgrade nodejs-ansi-wrapUpgrade nodejs-string-lengthUpgrade nodejs-fromUpgrade nodejs-is-streamUpgrade nodejs-slideUpgrade nodejs-is-npmUpgrade nodejs-fill-rangeUpgrade openshift-ansibleUpgrade nodejs-expand-bracketsUpgrade nodejs-lodash.defaultsUpgrade nodejs-align-textUpgrade nodejs-latest-versionUpgrade nodejs-read-all-streamUpgrade nodejs-package-jsonUpgrade nodejs-micromatchUpgrade nodejs-is-extendableUpgrade nodejs-is-dotfileUpgrade nodejs-is-binary-pathUpgrade nodejs-lodash.restparamUpgrade nodejs-pinkie-promiseUpgrade nodejs-normalize-pathUpgrade nodejs-lodash.assignUpgrade nodejs-ps-treeUpgrade nodejs-semverUpgrade jenkinsUpgrade nodejs-lowercase-keysUpgrade nodejs-arrifyUpgrade nodejs-preserveUpgrade nodejs-osenvUpgrade nodejs-pinkieUpgrade nodejs-semver-diffUpgrade nodejs-os-tmpdirUpgrade nodejs-duplexifyUpgrade nodejs-map-streamUpgrade nodejs-object-assignUpgrade nodejs-for-ownUpgrade nss_wrapperUpgrade nodejs-anymatchUpgrade nodejs-error-exUpgrade nodejs-update-notifierUpgrade nodejs-regex-cacheUpgrade nodejs-lodash.createassignerUpgrade nodejs-readdirpUpgrade nodejs-capture-stack-traceUpgrade nodejs-lodash.keysUpgrade nodejs-filename-regexUpgrade heapsterUpgrade nodejs-prepend-httpUpgrade nodejs-glob-parentUpgrade nodejs-mkdirpUpgrade nodejs-array-uniqueUpgrade nodejs-timed-outUpgrade nodejs-is-globUpgrade nodejs-rcUpgrade nodejs-lodash.bindcallbackUpgrade nodejs-xdg-basedirUpgrade openvswitchUpgrade nodejs-arr-diffUpgrade nodejs-pause-streamUpgrade atomic-openshiftUpgrade nodejs-is-numberUpgrade nodejs-is-plain-objUpgrade nodejs-chokidarUpgrade origin-kibanaUpgrade nodejs-lodash.isargumentsUpgrade nodejs-unzip-responseUpgrade nodejs-lodash.baseassignUpgrade nodejs-uuidUpgrade nodejs-glob-baseUpgrade nodejs-lazy-cacheUpgrade nodejs-is-extglobUpgrade nodejs-kind-ofUpgrade nodejs-bracesUpgrade nodejs-for-inUpgrade nodejs-repeat-elementUpgrade nodejs-nodemonUpgrade nodejs-es6-promiseUpgrade nodejs-touchUpgrade nodejs-is-redirectUpgrade openshiftUpgrade nodejs-undefsafeUpgrade nodejs-success-symbolUpgrade nodejs-iniUpgrade nodejs-ansi-greenUpgrade nodejs-parse-globUpgrade nodejs-async-eachUpgrade nodejs-event-streamUpgrade nodejs-graceful-fsUpgrade nodejs-write-file-atomicUpgrade nodejs-duplexerUpgrade nodejs-splitUpgrade nodejs-registry-urlUpgrade nodejs-arr-flattenUpgrade nodejs-lodash.basecopyUpgrade nodejs-binary-extensionsUpgrade nodejs-throughUpgrade nodejs-gotUpgrade nodejs-extglobUpgrade nodejs-is-equal-shallowUpgrade nodejs-end-of-streamUpgrade nodejs-strip-json-commentsUpgrade nodejs-is-primitiveUpgrade nodejs-lodash.isiterateecallUpgrade nodejs-parse-jsonUpgrade nodejs-configstoreUpgrade nodejs-create-error-classUpgrade nodejs-stream-combinerUpgrade nodejs-object.omitUpgrade nodejs-expand-rangeUpgrade nodejs-os-homedirUpgrade nodejs-url-parse-laxUpgrade nodejs-deep-extendUpgrade nodejs-isobjectUpgrade nodejs-lodash.isarrayUpgrade nodejs-lodash.getnativeUpgrade nodejs-optimistUpgrade nodejs-randomaticUpgrade nodejs-node-status-codes | Jun 18, 2018 | Jan 11, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub