VULNERABILITY INTELLIGENCE

CVE-2021-4178

CVSS score6.7 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2022-08-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML.

Weakness classification

  • secalert@redhat.com: CWE-502
  • nvd@nist.gov: CWE-502

Primary references