Executive Summary

Informations
NameCVE-2018-1002101First vendor Publication2018-12-05
VendorCveLast vendor Modification2018-12-19

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base ScoreNot DefinedAttack RangeNot Defined
Cvss Impact ScoreNot DefinedAttack ComplexityNot Defined
Cvss Expoit ScoreNot DefinedAuthenticationNot Defined
Calculate full CVSS 2.0 Vectors scores

Detail

In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1, user input was handled insecurely while setting up volume mounts on Windows nodes, which could lead to command line argument injection.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1002101

Sources (Detail)

SourceUrl
BID http://www.securityfocus.com/bid/106238
CONFIRM https://github.com/kubernetes/kubernetes/issues/65750

Alert History

If you want to see full details history, please login or register.
0
1
DateInformations
2018-12-19 17:19:02
  • Multiple Updates
2018-12-06 00:18:35
  • First insertion