CVE-2017-1002102 | Date: (C)2018-04-10 (M)2023-12-22 |
In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running.
CVSS Score and Metrics +CVSS Score and Metrics -CVSS V3 Severity: | CVSS V2 Severity: |
CVSS Score : 5.6 | CVSS Score : 6.3 |
Exploit Score: 1.1 | Exploit Score: 3.4 |
Impact Score: 4.0 | Impact Score: 9.2 |
|
CVSS V3 Metrics: | CVSS V2 Metrics: |
Attack Vector: LOCAL | Access Vector: LOCAL |
Attack Complexity: HIGH | Access Complexity: MEDIUM |
Privileges Required: LOW | Authentication: NONE |
User Interaction: NONE | Confidentiality: NONE |
Scope: CHANGED | Integrity: COMPLETE |
Confidentiality: NONE | Availability: COMPLETE |
Integrity: HIGH | |
Availability: NONE | |
| |