CVE-2019-11244GHSA-2575-PGHM-6QQX
kubectl creates world-writeable cached schema files
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 1.12.9
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with world-writeable permissions (rw-rw-rw-). If --cache-dir is specified and pointed at a different location accessible to other users/groups, the written files may be modified by other users/groups and disrupt the kubectl invocation.
Timeline
- CVE published
- Record last updated
Affected versions
- Kubernetes Kubernetes
From v1.8.0; From v1.9.0; From v1.10.0; From v1.11.0; From v1.12.0; From v1.13.0; From v1.14.0
- k8s.io/client-goGo
From 1.8.0 · fixed in 1.12.9