Directory traversal vulnerability in Kubernetes, as used in Red Hat OpenShift Enterprise 3.0, allows attackers to write to arbitrary files via a crafted object type name, which is not properly handled before passing it to etcd.
References
Link | Resource |
---|---|
https://access.redhat.com/errata/RHSA-2015:1945 | Vendor Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=1273969 | Vendor Advisory |
Configurations
History
No history.
Information
Published : 2015-11-06 18:59
Updated : 2024-02-28 15:21
NVD link : CVE-2015-5305
Mitre link : CVE-2015-5305
CVE.ORG link : CVE-2015-5305
JSON object : View
Products Affected
redhat
- openshift
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')