Google

Kubernetes Engine

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2019-10365

  • EPSS 0.09%
  • Published 31.07.2019 13:15:13
  • Last modified 21.11.2024 04:18:58

Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission.

9.3

CVE-2019-5736

Exploit
  • EPSS 53.41%
  • Published 11.02.2019 19:29:00
  • Last modified 21.11.2024 04:45:24

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types ...