Vulnerabilities > Kubernetes > Low

DATE CVE VULNERABILITY TITLE RISK
2018-06-02 CVE-2018-1002100 Improper Input Validation vulnerability in Kubernetes
In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary local files.
local
low complexity
kubernetes CWE-20
3.6
2017-08-07 CVE-2015-7561 Permissions, Privileges, and Access Controls vulnerability in multiple products
Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image.
3.5