CVE-2015-5305
Fixed in a distro release EPSS 2%
Directory traversal vulnerability in Kubernetes, as used in Red Hat OpenShift Enterprise 3.0, allows attackers to write to arbitrary files via a crafted object type name, which is not properly handled before passing it to etcd.
Products: redhat openshift
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/kubernetes/kubernetes | 1.1.1 |
| Go | k8s.io/kubernetes | 1.1.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 3.0 | openshift | 0:3.0.2.0-0.git.20.656dc3e.el7ose |
| Red Hat openshift 3.0 | openshift-clients | 0:3.0.2.0-0.git.20.656dc3e.el7ose |
| Red Hat openshift 3.0 | openshift-master | 0:3.0.2.0-0.git.20.656dc3e.el7ose |
| Red Hat openshift 3.0 | openshift-node | 0:3.0.2.0-0.git.20.656dc3e.el7ose |
| Red Hat openshift 3.0 | openshift-sdn-ovs | 0:3.0.2.0-0.git.20.656dc3e.el7ose |
| Red Hat openshift 3.0 | tuned-profiles-openshift-node | 0:3.0.2.0-0.git.20.656dc3e.el7ose |