Published: 05/12/2019 Updated: 07/11/2023

CVSS v2 Base Score: 5.5 | Impact Score: 4.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 5.2 | Exploitability Score: 1.2

VMScore: 490

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshotter (<v0.4.2, <v1.0.2, v1.1, <1.2.2), and external-resizer (v0.1, v0.2) could result in unauthorized PersistentVolume data access or volume mutation during snapshot, restore from snapshot, cloning and resizing operations.

Vulnerable Product	Search on Vulmon	Subscribe to Product
kubernetes external-resizer
kubernetes external-snapshotter
kubernetes external-provisioner
kubernetes external-provisioner 1.3.0
redhat openshift container platform 3.11
redhat openshift container platform 4.1
redhat openshift container platform 4.2

Synopsis Moderate: OpenShift Container Platform 42 csi-provisioner-container security update Type/Severity Security Advisory: Moderate Topic An update for csi-provisioner-container is now available for Red Hat OpenShift Container Platform 42Red Hat Product Security has rated this update as having a secur ...

Synopsis Moderate: OpenShift Container Platform 42 openshift-external-storage security update Type/Severity Security Advisory: Moderate Topic An update for openshift-external-storage is now available for Red Hat OpenShift Container Platform 42Red Hat Product Security has rated this update as having a sec ...

Synopsis Moderate: OpenShift Container Platform 311 openshift-external-storage security update Type/Severity Security Advisory: Moderate Topic An update for openshift-external-storage is now available for Red Hat OpenShift Container Platform 311Red Hat Product Security has rated this update as having a s ...

Synopsis Moderate: OpenShift Container Platform 41 openshift-external-storage security update Type/Severity Security Advisory: Moderate Topic An update for openshift-external-storage is now available for Red Hat OpenShift Container Platform 41Red Hat Product Security has rated this update as having a sec ...

CWE-20 https://github.com/kubernetes/kubernetes/issues/85233 https://access.redhat.com/errata/RHSA-2019:4099 https://access.redhat.com/errata/RHSA-2019:4096 https://access.redhat.com/errata/RHSA-2019:4054 https://access.redhat.com/errata/RHSA-2019:4225 https://security.netapp.com/advisory/ntap-20200810-0003/https://groups.google.com/forum/#%21topic/kubernetes-security-announce/aXiYN0q4uIw https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2019:4099

CVE-2019-11255

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect