VDB
Sign up
HIGH7.7

GHSA-xx8c-m748-xr4j

Access Restriction Bypass in kubernetes

Quick fix

GHSA-xx8c-m748-xr4j — github.com/kubernetes/kubernetes: upgrade to the fixed version with the command below.

go get github.com/kubernetes/kubernetes@v1.2.0-alpha.6

Details

The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.

### Specific Go Packages Affected github.com/kubernetes/kubernetes/pkg/apiserver

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/kubernetes/kubernetes
Introduced in: 0Fixed in: 1.2.0-alpha.6
Fixgo get github.com/kubernetes/kubernetes@v1.2.0-alpha.6

References