CVE-2017-1002100

Default access permissions for Persistent Volumes PVs created by the Kubernetes Azure cloud provider in versions 1.6.0 to 1.6.5 are set to "container" which exposes a URI that can be accessed without authentication on the public internet. Access to the URI string requires privileged access to the...

PT-2017-11019

Name of the Vulnerable Software and Affected Versions Kubernetes Azure cloud provider versions 1.6.0 through 1.6.5 Description The issue concerns the default access permissions for Persistent Volumes PVs created by the Kubernetes Azure cloud provider. These permissions are set to "container", whi...

CVE-2017-1002100: Exposure of Sensitive Information to an Unauthorized Actor

Default access permissions for Persistent Volumes PVs created by the Kubernetes Azure cloud provider in versions 1.6.0 to 1.6.5 are set to "container" which exposes a URI that can be accessed without authentication on the public internet. Access to the URI string requires privileged access to the...