CVE-2017-1000056: Missing Authorization

May 12, 2021 (updated September 8, 2022)

Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object.

References

github.com/advisories/GHSA-2jx2-76rc-2v7v
github.com/kubernetes/kubernetes/commit/7fef0a4f6a44ea36f166c39fdade5324eff2dd5e
github.com/kubernetes/kubernetes/issues/43459
nvd.nist.gov/vuln/detail/CVE-2017-1000056

Code Behaviors & Features

Detect and mitigate CVE-2017-1000056 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →