CVE-2017-1000056

Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-07-17

Last modified

2024-08-05

Weaknesses

CWE-862

Affected products

• Kubernetes (Kubernetes)

References

• https://github.com/kubernetes/kubernetes/issues/43459