WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor kubernetes✕
Overview 7 matches · 1 in Waratek scope · 1 protected · 0 exploited · 0 CISA KEV · 2 public PoC · 1 EPSS ≥ 0.5
7matches 1in Waratek scope14.3% 1protected14.3% 0exploited0.0% 0CISA KEV0.0% 2public PoC28.6% 1EPSS ≥ 0.514.3%
Protected by Waratek 1 14.3% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 6 85.7% Withdrawn CVE 0 0.0%
Critical 7 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 14.3% partly blocked 0 0.0% not blocked 6 85.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 1 14.3% Proof of concept only 1 14.3% Forecast only 0 0.0% No public exploit 5 71.4%
split by peak 3 / year
Not applicable: 6Protected by Waratek: 1 Critical: 7 not blocked: 6blocked by ARMR today: 1 No public exploit: 5Proof of concept only: 1Working exploit published: 1
20161 Not applicable1 Critical1 not blocked1 No public exploit1 20171 Not applicable1 Critical1 not blocked1 No public exploit1 20183 Not applicable3 Critical3 not blocked3 Working exploit published1 Proof of concept only1 No public exploit1 20190 20200 20211 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 20220 20231 Not applicable1 Critical1 not blocked1 No public exploit1
20162017201820192020202120222023
7 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2023-1174 Critical 2023-05-24 Not applicable No public exploit This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.
CVE-2020-8570 Critical 2021-01-21 Protected by Waratek No public exploit Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executing the client code.
CVE-2018-1002105 Critical 2018-12-05 Not applicable Working exploit published In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.
CVE-2018-1002101 Critical 2018-12-05 Not applicable No public exploit In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1, user input was handled insecurely while setting up volume mounts on Windows nodes, which could lead to command line argument injection.
CVE-2017-1002101 Critical 2018-03-13 Not applicable Proof of concept only In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.
CVE-2017-1000056 Critical 2017-07-17 Not applicable No public exploit Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object.
CVE-2016-1906 Critical 2016-02-03 Not applicable No public exploit Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.