Security Advisories

CGA-mqw3-w5r8-mjwm

Published

Last updated

https://images.chainguard.dev/security/CGA-mqw3-w5r8-mjwm

Package

falcoctl

Latest Update

Fixed

Fixed Version

0.7.3-r8

Aliases

Severity

6.8

Medium

CVSS V3

Summary

Privilege Escalation in Kubernetes

Description

The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.7 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise.

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-mqw3-w5r8-mjwm

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources