• CVE-2021-25749

发布时间: 2022年10月21日

修改时间: 2022年10月21日

概要

A security issue was discovered in Kubernetes that could allow Windows workloads to run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.ref: https://github.com/rancher/rancher/issues/38949

CVSS v3 指标

NVD openEuler
Confidentiality Low
Attack Vector Adjacent
CVSS评分 3.4
Attack Complexity High
Privileges Required High
Scope Unchanged
Integrity Low
User Interaction Required
Availability Low

安全公告

公告名 概要 发布时间
KylinSec-SA-2022-2497 A security issue was discovered in Kubernetes that could allow Windows workloads to run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.ref: https://github.com/rancher/rancher/issues/38949 2022年10月21日

影响产品

产品 状态
KY3.4-4A kubernetes Unaffected
KY3.4-5 kubernetes Unaffected
KY3.5.1 kubernetes Unaffected