Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Kubernetes Releases Security Update

Kubernetes has released a security update to address a directory traversal vulnerability in the kubectl cp command. A local unauthenticated attacker could exploit this vulnerability to copy or alter files on an affected system.

Threat ID:
CC-3123
Category:
Threat Severity:
Medium
Threat Vector:
Published:
27 June 2019 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Kubernetes has released a security update to address a directory traversal vulnerability in the kubectl cp command. A local unauthenticated attacker could exploit this vulnerability to copy or alter files on an affected system.

Threat details

For further information:

Remediation steps

Type Step

Users and administrators are encouraged to review the Kubernetes security advisory and apply the necessary updates.

Last edited: 14 February 2020 2:44 pm