CVE-2018-1103CWE-22

Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input

Medium · published June 12, 2018

CVSS v3.0
6.1
EPSS
1%
Percentile
71.0
In the wild
Unconfirmed
What it is

Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command.

The record
Technical detail
CVSS v3.0
6.1 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01338 · 71.0th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2018-06-12T15:00Z
EPSS history
Timeline
  • 12 JUN 15:00Z
    Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input
    cvelistv5