~ / search / GHSA-2jx2-76rc-2v7v

GHSA-2jx2-76rc-2v7v

Kubernetes Privilege Escalation

Source: GitHub Advisory Database (reviewed) Critical CVE-2017-1000056

Packages

EcosystemPackageAffectedFixed in
Go k8s.io/kubernetes >= 1.5.0, < 1.5.5 1.5.5

Details

As written in the advisory (Markdown source, shown as plain text).

Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object.

References

External links from the advisory. They lead to third-party sites.