CVE-2015-7561

Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image.
References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1291963 Issue Tracking Third Party Advisory VDB Entry
https://github.com/kubernetes/kubernetes/pull/18909 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:kubernetes:kubernetes:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift:3.0:*:*:*:*:*:*:*

History

03 Jun 2021, 15:04

Type Values Removed Values Added
CPE cpe:2.3:a:google:kubernetes:-:*:*:*:*:*:*:* cpe:2.3:a:kubernetes:kubernetes:-:*:*:*:*:*:*:*

Information

Published : 2017-08-07 17:29

Updated : 2024-02-04 19:29


NVD link : CVE-2015-7561

Mitre link : CVE-2015-7561

CVE.ORG link : CVE-2015-7561


JSON object : View

Products Affected

kubernetes

  • kubernetes

redhat

  • openshift
CWE
CWE-264

Permissions, Privileges, and Access Controls