CVE-2019-11255 Kubernetes CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

[
  {
    "product": "kubernetes-csi external-provisioner",
    "vendor": "Kubernetes",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 1.0.2"
      },
      {
        "status": "affected",
        "version": "1.1"
      },
      {
        "status": "affected",
        "version": "prior to 1.2.2"
      },
      {
        "status": "affected",
        "version": "prior to 1.3.1"
      },
      {
        "lessThan": "prior to 0.4.3",
        "status": "affected",
        "version": "v1.14",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "kubernetes-csi external-snapshotter",
    "vendor": "Kubernetes",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 0.4.2"
      },
      {
        "status": "affected",
        "version": "prior to 1.0.2"
      },
      {
        "status": "affected",
        "version": "1.1"
      },
      {
        "status": "affected",
        "version": "prior to 1.2.2"
      }
    ]
  },
  {
    "product": "kubernetes-csi external-resizer",
    "vendor": "Kubernetes",
    "versions": [
      {
        "status": "affected",
        "version": "0.1"
      },
      {
        "status": "affected",
        "version": "0.2"
      }
    ]
  }
]