CVE-2016-1905
Access Restriction Bypass in kubernetes
概要
Access Restriction Bypass in kubernetes
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.
Specific Go Packages Affected
github.com/kubernetes/kubernetes/pkg/apiserver
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Go
github.com/kubernetes/kubernetes
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.2.0-alpha.6"}]}]
参照URL
- advisory nvd.nist.gov
- web github.com
- web github.com
- web access.redhat.com
- web access.redhat.com
- web access.redhat.com
- web bugzilla.redhat.com