Directory traversal vulnerability in Kubernetes, as used in Red Hat OpenShift Enterprise 3.0, allows attackers to write to arbitrary files via a crafted object type name, which is not properly handled before passing it to etcd.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1273969 | Vendor Advisory |
https://access.redhat.com/errata/RHSA-2015:1945 | Vendor Advisory |
Configurations
Information
Published : 2015-11-06 10:59
Updated : 2023-02-12 16:53
NVD link : CVE-2015-5305
Mitre link : CVE-2015-5305
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Products Affected
redhat
- openshift