CVE:CVE-2019-11255
CNNVD:CNNVD-201911-1035
Kubernetes是美国Linux基金会的一套开源的Docker容器集群管理系统。该系统为容器化的应用提供资源调度、部署运行、服务发现和扩容缩容等功能。
Kubernetes中存在输入验证错误漏洞。攻击者可利用该漏洞绕过访问限制，获取敏感信息。
solution:Upgrade kubernetes external-provisioner to a higher version than 0.4.2,1.0.1,1.2.1,1.3.0,and avoid the version [0.4.1,0.4.2],[1.0.0,1.0.1],[1.1.0,1.2.1],1.3.0; Upgrade kubernetes external-resizer to a higher version than 0.2.0,and avoid the version [0.1.0,0.2.0]; Upgrade kubernetes external-snapshotter to a higher version than 0.4.1,1.0.1,1.2.1,and avoid the version [0.4.0,0.4.1],[1.0.0,1.0.1],[1.1.0,1.2.1]; Upgrade redhat openshift_container_platform to a higher version than 3.11,4.1,4.2,and avoid the version 3.11,4.1,4.2