GHSA-xx8c-m748-xr4jHighCVSS 7.7

Access Restriction Bypass in kubernetes

Published
February 15, 2022
Last Modified
October 2, 2023

🔗 CVE IDs covered (1)

CVE-2016-1905 →

📋 Description

The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.

Specific Go Packages Affected

github.com/kubernetes/kubernetes/pkg/apiserver

🎯 Affected products1

  • go/github.com/kubernetes/kubernetes:<= 1.2.0-alpha.5

🔗 References (8)