Sin puntuación

CVE-2020-8570Kubernetes Java client libraries unvalidated path traversal in Copy implementation

Kubernetes Kubernetes Java Client Publicada: 2021-01-21 20:09 (hace 5 años)

Descripción

Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executing the client code.

Debilidad (CWE): CWE-23

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Fabricante	Producto	Versiones
Kubernetes	Kubernetes Java Client	all versions prior to 9.0, 9.0 – < 9.0.2, 10.0 – < 10.0.1

Referencias y parches

Puntuación CVSS

Aún sin puntuación. Aparecerá cuando la CNA, CISA o NVD la puntúen.

EPSS (probabilidad de explotación en 30 días)

3.69%

superior al 90 % de todas las CVE

Cronología

ID reservado2020-02-03
Publicada2021-01-21 20:09
Llegó a IP-DB2026-10-25 00:04
Última actualización2024-09-17 01:01

Asignada por (CNA): kubernetes

Ver en la fuente: CVE.org · NVD

Reciba un aviso cuando estos productos tengan una vulnerabilidad nueva

Activar alertas por correo

Gratis · con cuenta · se desactiva cuando quiera

CVE recientes del mismo producto — Kubernetes

2.7Baja

CVE-2026-116472 hace 2 días

ingress-nginx mirror-target self-DOS

Kubernetes ingress-nginx; SUSE Rancher Prime RKE2 ingress-nginx

A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial of service of the ingress-nginx data plane, or possibly redirect traffic from other Ingresses. Kubernetes clusters are only affected…

5.9Media

CVE-2026-2270 hace 12 días

StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation

Kubernetes Kubernetes

A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects to create a cross-namespace pod. An attacker exploiting this vulnerability would have full c…

5.8Media

CVE-2026-76654 hace 12 días

Subpath symlinking on Windows nodes permits NTLM coercion

Kubernetes Kubernetes

An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does not reject a target that resolves…

6.5Media

CVE-2026-19444 hace 1 mes

Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes

Kubernetes Kubernetes

A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on…

2.7Baja

CVE-2026-15687 hace 3 meses

Path traversal via non-tar copyDirectoryFromPod

Kubernetes kubernetes-client/java

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.

6.5Media

CVE-2026-3864 hace 7 meses

CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server

Kubernetes CSI Driver for NFS

A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI driver could craft volume identif…