CVE-2016-1905
Access Restriction Bypass in kubernetes
Summary
Access Restriction Bypass in kubernetes
Original description
The description as published by the source.
The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.
Specific Go Packages Affected
github.com/kubernetes/kubernetes/pkg/apiserver
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Go
github.com/kubernetes/kubernetes
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.2.0-alpha.6"}]}]
References
- advisory nvd.nist.gov
- web github.com
- web github.com
- web access.redhat.com
- web access.redhat.com
- web access.redhat.com
- web bugzilla.redhat.com