CVE-2015-7561
Fixed in a distro release EPSS 1%
Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image.
Products: kubernetes, redhat openshift
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | k8s.io/kubernetes | 1.2.0-alpha.6 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | kubernetes-1.30 | 0 |
| Chainguard | kubernetes-1.31 | 0 |
| Chainguard | kubernetes-1.32 | 0 |
| Chainguard | kubernetes-1.33 | no fix |
| Chainguard | kubernetes-1.34 | no fix |
| Chainguard | kubernetes-1.35 | no fix |
| Chainguard | kubernetes-1.36 | no fix |
| Chainguard | kubernetes-1.37 | no fix |
| Wolfi | kubernetes-1.34 | no fix |
| Wolfi | kubernetes-1.35 | no fix |
| Wolfi | kubernetes-1.36 | no fix |
| Wolfi | kubernetes-1.37 | no fix |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20250807T150727-1.1 |