LOW 3.1 Go
Kubernetes in OpenShift3 Access Control Misconfiguration
GHSA-2h9c-34v6-3qmr · CVE-2015-7561 · GO-2023-1985
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2015-7561
- WEB https://github.com/kubernetes/kubernetes/pull/18909
- WEB https://github.com/kubernetes/kubernetes/commit/e185b1028ac8459f7b451e1115399192e96f6ee9
- WEB https://bugzilla.redhat.com/show_bug.cgi?id=1291963
- PACKAGE https://github.com/kubernetes/kubernetes
Ready to move
Start Securing
Free, no credit card | First findings in minutes