Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-1000400
HistoryMay 18, 2018 - 6:29 p.m.

Privilege escalation

2018-05-1818:29:00
PRIOn knowledge base
www.prio-n.com
3

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can result in containers running with elevated privileges, allowing users abilities they should not have. This attack appears to be exploitable via container execution. This vulnerability appears to have been fixed in 1.9.

CPENameOperatorVersion
cri-olt1.9.0

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%