VULNERABILITY INTELLIGENCE

CVE-2018-1002100

CVSS score4.2 MEDIUM
EPSS probability1.67%
CISA KEVNot currently listed
Published2018-06-02
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N

Description

In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary local files.

Weakness classification

  • nvd@nist.gov: CWE-20

Primary references