Security Advisories

CGA-m2h9-qwj5-2qw4

Published

Last updated

https://images.chainguard.dev/security/CGA-m2h9-qwj5-2qw4

Package

ghaudit

Latest Update

Fixed

Fixed Version

0.4.0-r1

Aliases

Severity

6.8

Medium

CVSS V3

Summary

Privilege Escalation in Kubernetes

Description

The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.7 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise.

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-m2h9-qwj5-2qw4

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources