CVE-2018-1714

The IBM bulletin confirms CVE-2018-1714 affects IBM Cloud Private 2.1.0 where any user authorized to deploy a Helm chart can install an unsafe chart that runs with privileges greater than the Helm user’s. Impact is privilege escalation within the cluster, with CVSS Base Score 7. Remediation: upgr...

Security Bulletin: Users of Helm with IBM Cloud Private can elevate their privileges (CVE-2018-1714)

Summary Users of Helm with IBM Cloud Private can elevate their privileges Vulnerability Details CVEID: CVE-2018-1714 DESCRIPTION: Any user who is authorized to deploy a Helm chart in IBM Cloud Private 2.1.0 can install an unsafe Helm Chart that can run with privileges greater than the Helm user i...