A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-kubernetes | Jul 30, 2024 | Sep 20, 2021 | |
| Kubernetes | kubernetes-upgrade-1_19_15kubernetes-upgrade-1_20_11kubernetes-upgrade-1_21_5kubernetes-upgrade-1_22_2 | Mar 10, 2022 | Sep 20, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-istiooracle-linux-upgrade-istio-istioctloracle-linux-upgrade-kubeadmoracle-linux-upgrade-kubectloracle-linux-upgrade-kubeletoracle-linux-upgrade-olcne-agentoracle-linux-upgrade-olcne-api-serveroracle-linux-upgrade-olcnectloracle-linux-upgrade-olcne-grafana-chartoracle-linux-upgrade-olcne-istio-chartoracle-linux-upgrade-olcne-nginxoracle-linux-upgrade-olcne-olm-chartoracle-linux-upgrade-olcne-prometheus-chartoracle-linux-upgrade-olcne-utils | Nov 9, 2021 | Sep 20, 2021 |
| Redhat Openshift | linuxrpm-upgrade-atomic-openshiftlinuxrpm-upgrade-openshift | Sep 29, 2021 | Sep 20, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Sep 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub