Lucene search
PRIOn knowledge basePRION:CVE-2019-11244HistoryApr 22, 2019 - 3:29 p.m.
Design/Logic Flaw
2019-04-2215:29:00
PRIOn knowledge base
www.prio-n.com
5
In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with world-writeable permissions (rw-rw-rw-). If --cache-dir is specified and pointed at a different location accessible to other users/groups, the written files may be modified by other users/groups and disrupt the kubectl invocation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kubernetes | ge | 1.8.0 | |
| kubernetes | le | 1.14.1 | |
| openshift_container_platform | eq | 3.11 | |
| openshift_container_platform | eq | 4.1 |
Related
redhatcve
redhatcve
CVE-2019-11244
2020-04-06 23:05:27
ibm
ibm
gitlab
gitlab
Incorrect Permission Assignment for Critical Resource
2019-04-22 00:00:00
nessus
nessus
Oracle Linux 7 : kubeadm-ha-setup (ELSA-2019-4717)
2023-09-07 00:00:00
RHEL 7 : OpenShift Container Platform 3.11 atomic-openshift (RHSA-2020:0020)
2020-01-15 00:00:00
RHEL 7 / 8 : OpenShift Container Platform 4.1.24 openshift (RHSA-2019:3942)
2019-11-22 00:00:00
osv
osv
CVE-2019-11244
2019-04-22 15:29:00
Kubernetes Unsafe Cacheing
2022-02-15 01:57:18
cvelist
cvelist
CVE-2019-11244 kubectl creates world-writeable cached schema files
2019-04-22 14:54:15
redhat
redhat
debiancve
debiancve
CVE-2019-11244
2019-04-22 15:29:00
veracode
veracode
Insecure Cache Configurations
2019-04-23 07:11:27
cve
cve
CVE-2019-11244
2019-04-22 15:29:00
symantec
symantec
Kubernetes CVE-2019-11244 Local Unauthorized Access Vulnerability
2019-04-22 00:00:00
nvd
nvd
CVE-2019-11244
2019-04-22 15:29:00
oraclelinux
oraclelinux
kubeadm-ha-setup security update
2019-07-29 00:00:00
kubernetes security update
2019-07-29 00:00:00
kubernetes security update
2019-07-29 00:00:00
github
github
Kubernetes Unsafe Cacheing
2022-02-15 01:57:18
photon
photon