In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running.
CPE | Name | Operator | Version |
---|---|---|---|
kubernetes | ge | 1.3.0 | |
kubernetes | le | 1.3.10 | |
kubernetes | ge | 1.4.0 | |
kubernetes | le | 1.4.12 | |
kubernetes | ge | 1.5.0 | |
kubernetes | le | 1.5.8 | |
kubernetes | ge | 1.6.0 | |
kubernetes | le | 1.6.13 | |
kubernetes | ge | 1.7.0 | |
kubernetes | lt | 1.7.14 |