K8S.Io Kubernetes Cmd Kubelet vulnerabilities

1 known vulnerability affecting k8s.io/kubernetes_cmd_kubelet.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2019-11245MEDIUM≥ 1.14.0, < 1.14.3≥ 1.13.0, < 1.13.72024-04-24

CVE-2019-11245 [MEDIUM] CWE-266 Kubelet Incorrect Privilege Assignment Kubelet Incorrect Privilege Assignment In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit `runAsUser` attempt to run as uid 0 (root) on container restart, or if the image was previously pulled to the node. If the pod specified `mustRunAsNonRoot: true`, the kubelet will refuse to start the container as root. If the pod did not specify `mustRunAsNonRoot: true`, the kubelet will run the containe