CVE-2017-1002102

—

CVSS 3.0

5.6 medium

EPSS

<1%p58

Published

Mar 13, 2018 (Mar 13, 2018)

Modified

Jun 17, 2026

Description

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running.

Vendors: kubernetes
Products: kubernetes
Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.