A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade kubernetes | Jul 30, 2024 | Sep 20, 2021 |
| Kubernetes | — | Upgrade Kubernetes to version 1.22.2Upgrade Kubernetes to version 1.21.5Upgrade Kubernetes to version 1.20.11Upgrade Kubernetes to version 1.19.15 | Mar 10, 2022 | Sep 20, 2021 |
| Oracle_linux | — | Upgrade olcne-agentUpgrade olcne-utilsUpgrade olcne-nginxUpgrade kubectlUpgrade olcnectlUpgrade istioUpgrade kubeletUpgrade istio-istioctlUpgrade olcne-istio-chartUpgrade kubeadmUpgrade olcne-api-serverUpgrade olcne-grafana-chartUpgrade olcne-olm-chartUpgrade olcne-prometheus-chart | Nov 9, 2021 | Sep 20, 2021 |
| Redhat Openshift | — | Upgrade openshiftUpgrade atomic-openshift | Sep 29, 2021 | Sep 15, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub