Directory traversal vulnerability in Kubernetes, as used in Red Hat OpenShift Enterprise 3.0, allows attackers to write to arbitrary files via a crafted object type name, which is not properly handled before passing it to etcd.
References
Link | Resource |
---|---|
https://access.redhat.com/errata/RHSA-2015:1945 | Vendor Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=1273969 | Vendor Advisory |
https://access.redhat.com/errata/RHSA-2015:1945 | Vendor Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=1273969 | Vendor Advisory |
Configurations
History
21 Nov 2024, 02:32
Type | Values Removed | Values Added |
---|---|---|
References | () https://access.redhat.com/errata/RHSA-2015:1945 - Vendor Advisory | |
References | () https://bugzilla.redhat.com/show_bug.cgi?id=1273969 - Vendor Advisory |
Information
Published : 2015-11-06 18:59
Updated : 2024-11-21 02:32
NVD link : CVE-2015-5305
Mitre link : CVE-2015-5305
CVE.ORG link : CVE-2015-5305
JSON object : View
Products Affected
redhat
- openshift
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')