GHSA-2h9c-34v6-3qmr

Source

https://github.com/advisories/GHSA-2h9c-34v6-3qmr

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-2h9c-34v6-3qmr/GHSA-2h9c-34v6-3qmr.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-2h9c-34v6-3qmr

Aliases

CVE-2015-7561
GO-2023-1985

Related

Published

2022-05-13T01:09:54Z

Modified

2024-08-20T20:58:40.447772Z

Severity

3.1 (Low) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Kubernetes in OpenShift3 Access Control Misconfiguration

Details

Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image.

Database specific

{
    "nvd_published_at": "2017-08-07T17:29:00Z",
    "cwe_ids": [],
    "severity": "LOW",
    "github_reviewed": true,
    "github_reviewed_at": "2023-07-31T23:55:42Z"
}

References

Affected packages

Go / k8s.io/kubernetes

Package

Name: k8s.io/kubernetes; View open source insights on deps.dev
Purl: pkg:golang/k8s.io/kubernetes

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.0-alpha.6