NetSight
critical9.8

CVE-2017-1000056

Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any ex…

Impact

Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object.

Affected products

VendorProductAffected versions
KubernetesKubernetes
Versions 1.5.0, 1.5.1, 1.5.2, 1.5.3, 1.5.4

Weakness classification

References