CVEvulnerability
CVE-2019-15789
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-04-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-269
Description
Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioning a privileged container. Fixed in MicroK8s 1.15.3.
Affected configurations
• canonical microk8s (< 1.15.3)
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://discuss.kubernetes.io/t/explicit-use-of-sudo-in-microk8s-cli/7605 Third Party Advisory
- https://github.com/ubuntu/microk8s/pull/590 Third Party Advisory
- https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-15789.html Vendor Advisory
- https://pulsesecurity.co.nz/advisories/microk8s-privilege-escalation Exploit, Third Party Advisory
- https://discuss.kubernetes.io/t/explicit-use-of-sudo-in-microk8s-cli/7605 Third Party Advisory
- https://github.com/ubuntu/microk8s/pull/590 Third Party Advisory
- https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-15789.html Vendor Advisory
- https://pulsesecurity.co.nz/advisories/microk8s-privilege-escalation Exploit, Third Party Advisory