Skip to main content

Kubernetes Releases Security Update

Kubernetes has released a security update to address a directory traversal vulnerability in the kubectl cp command. A local unauthenticated attacker could exploit this vulnerability to copy or alter files on an affected system.

Threat ID:
CC-3123
Category:
Threat Severity:
Medium
Threat Vector:
Published:
27 June 2019 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Kubernetes has released a security update to address a directory traversal vulnerability in the kubectl cp command. A local unauthenticated attacker could exploit this vulnerability to copy or alter files on an affected system.

Threat details

For further information:

Remediation steps

Type Step

Users and administrators are encouraged to review the Kubernetes security advisory and apply the necessary updates.

Last edited: 14 February 2020 2:44 pm