A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade kubernetes | Jul 30, 2024 | Sep 20, 2021 |
| Kubernetes | — | Upgrade Kubernetes to version 1.20.11Upgrade Kubernetes to version 1.19.15Upgrade Kubernetes to version 1.21.5Upgrade Kubernetes to version 1.22.2 | Mar 10, 2022 | Sep 20, 2021 |
| Oracle_linux | — | Upgrade olcne-olm-chartUpgrade olcne-api-serverUpgrade olcne-grafana-chartUpgrade olcne-prometheus-chartUpgrade kubeadmUpgrade kubectlUpgrade istioUpgrade olcnectlUpgrade olcne-istio-chartUpgrade olcne-utilsUpgrade olcne-agentUpgrade olcne-nginxUpgrade kubeletUpgrade istio-istioctl | Nov 9, 2021 | Sep 20, 2021 |
| Redhat Openshift | — | Upgrade atomic-openshiftUpgrade openshift | Sep 29, 2021 | Sep 15, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub