Kubernetes Unsafe Cacheing
In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by `--cache-dir` (defaulting to `$HOME/.kube/http-cache`), written with world-writeable permissions (`rw-rw-rw-`). If `--cache-dir` is specified and pointed at a different location accessible to other users/groups, the written files may be modified by other users/groups and disrupt the kubectl invocation.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-11244US | medium5.0 | — | ||
In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with world-writeable permiss… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://www.securityfocus.com/bid/108064WEB
- https://access.redhat.com/errata/RHSA-2019:3942WEB
- https://access.redhat.com/errata/RHSA-2020:0020WEB
- https://access.redhat.com/errata/RHSA-2020:0074WEB
- https://github.com/kubernetes/client-go/commit/790a4f63632139cf6731014d00a9a8338f1fbd7dWEB
- https://github.com/kubernetes/kubernetes/issues/76676WEB
- https://github.com/kubernetes/kubernetes/pull/77874WEB
- https://github.com/kubernetes/kubernetes/pull/77874/commits/f228ae3364729caed59087e23c42868454bc3ff4WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan