PT-2019-12210 · Kubernetes+1 · Kubernetes+1

Jordan Zebor + 1 · Published 2019-04-22 · Updated 2022-02-15 · CVE-2019-11244

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Kubernetes versions 1.8.x through 1.14.x

Description The issue concerns the caching of schema information by kubectl, which is written with world-writeable permissions. If the cache directory is specified and located in a place accessible to other users or groups, the cached files can be modified, potentially disrupting kubectl operations. The cache directory defaults to $HOME/.kube/http-cache, but can be changed using the --cache-dir option.

Recommendations For Kubernetes versions 1.8.x through 1.14.x, consider restricting access to the cache directory to prevent modifications by other users or groups. As a temporary workaround, avoid using a cache directory that is accessible to other users or groups.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

CWE-524

Related Identifiers

ALT-PU-2019-2453

ALT-PU-2019-2454

CVE-2019-11244

GHSA-2575-PGHM-6QQX

RHSA-2019:3942

RHSA-2020:0020

Affected Products

Alt Linux

Kubernetes

References · 20

• 🔥 https://github.com/tdwyer/CVE-2020-8559 · Exploit
• 🔥 https://github.com/tabbysable/POC-2020-8559 · Exploit
• 🔥❌ https://github.com/nod3jzzz/poc-CVE-2019-11248 · Exploit, Deleted
• 🔥❌ https://github.com/masm3264/poc-CVE-2019-11248 · Exploit, Deleted
• 🔥❌ https://github.com/nop2nop/cve-2019-11248 · Exploit, Deleted
• https://access.redhat.com/errata/RHSA-2020:0074 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11244 · Security Note
• https://access.redhat.com/errata/RHSA-2019:3942 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2020:0020 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-4716.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-4816.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-11244 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-4717.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2575-pghm-6qqx · Vendor Advisory
• https://github.com/kubernetes/kubernetes/issues/76676 · Note