CVE-2017-1000056

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Jul 17, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-10000586.1Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser.CVE-2017-10000596.1Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any CVE-2017-10000609.8EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root CVE-2017-10000617.1xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible informat CVE-2017-10000627.5kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution CVE-2017-10000636.1kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure CVE-2017-10000647.5kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS CVE-2017-10000656.1Multiple Cross-site scripting (XSS) vulnerabilities in rpc.php in OpenMediaVault release 2.1 in Access Rights Management(Users) functionalit CVE-2017-10000667.5The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the CVE-2017-10000678.8MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape method resulting in a CVE-2017-10000687.5TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resulting in the ability CVE-2017-10000698.8CSRF in Bitly oauth2_proxy 2.1 during authentication flow