CVE-2017-1002100

Default access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure cloud provider in versions 1.6.0 to 1.6.5 are set to "container" which…

published September 14, 2017

CVSS
—
EPSS
1%
Percentile
70.8
In the wild
Unconfirmed
What it is

Default access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure cloud provider in versions 1.6.0 to 1.6.5 are set to "container" which exposes a URI that can be accessed without authentication on the public internet. Access to the URI string requires privileged access to the Kubernetes cluster or authenticated access to the Azure portal.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01330 · 70.8th percentile
Published
2017-09-14T13:00Z
EPSS history
Timeline
  • 14 SEP 13:00Z
    Default access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure cloud provider in versions 1.6.0 to 1.6.5 are set to "container" which…
    cvelistv5