Vulnerabilities > Kubernetes

DATE CVE VULNERABILITY TITLE RISK
2016-02-03 CVE-2016-1906 Permissions, Privileges, and Access Controls vulnerability in Kubernetes
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
network
low complexity
kubernetes CWE-264
critical
9.8
2016-02-03 CVE-2016-1905 Improper Access Control vulnerability in Kubernetes
The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.
network
low complexity
kubernetes CWE-284
7.7