CVE-2017-1000056

Critical

Published: 17/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Kubernetes versions 1.5.0-1.5.4 are vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin, allowing the use of any existing PodSecurityPolicy object.

Risk Assessment

Privilege escalation may lead to unauthorized access to resources in the Kubernetes cluster, jeopardizing the security of the entire infrastructure.

Recommendation

It is recommended to upgrade Kubernetes to a version newer than 1.5.4 to mitigate this vulnerability.

Original NVD description (English source)

Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object.