GitHub Advisoryadvisory · Go
GHSA-2h9c-34v6-3qmr Kubernetes in OpenShift3 Access Control Misconfiguration
LOW
Official page ↗
- Aliases
- CVE-2015-7561
- Ecosystem
- Go
- Packages
- k8s.io/kubernetes
- Severity
- Low
- CVSS vector
- CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
- Reviewed
- 2023-07-31
Affected packages
• Go k8s.io/kubernetes: < 1.2.0-alpha.6 → fixed in 1.2.0-alpha.6
Description
Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image.
Related
Alias · CVE (1)
- CVE-2015-7561 Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image. vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2015-7561 advisory
- https://github.com/kubernetes/kubernetes/pull/18909 web
- https://github.com/kubernetes/kubernetes/commit/e185b1028ac8459f7b451e1115399192e96f6ee9 web
- https://bugzilla.redhat.com/show_bug.cgi?id=1291963 web
- https://github.com/kubernetes/kubernetes package