CVE-2016-1905
Access Restriction Bypass in kubernetes
Résumé
Access Restriction Bypass in kubernetes
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.
Specific Go Packages Affected
github.com/kubernetes/kubernetes/pkg/apiserver
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Go
github.com/kubernetes/kubernetes
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.2.0-alpha.6"}]}]
Références
- advisory nvd.nist.gov
- web github.com
- web github.com
- web access.redhat.com
- web access.redhat.com
- web access.redhat.com
- web bugzilla.redhat.com