CVE-2020-8570

 

Published at: - 21-01-2021 06:15

Last modified: - 07-10-2022 04:20

Total changes: - 8

Description

Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executing the client code.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

 

Verification logic

 

Reference

• N/A-Issue Tracking, Patch, Third Party Advisory
• N/A-Mailing List, Third Party Advisory
• [druid-commits] 20210201 [GitHub] [druid] jon-wei opened a new pull request #10826: Address CVE-2020-8570, suppress CVE-2020-8554-Issue Tracking, Mailing List, Third Party Advisory
• [druid-commits] 20210202 [GitHub] [druid] jon-wei opened a new pull request #10826: Address CVE-2020-8570, suppress CVE-2020-8554-Issue Tracking, Mailing List, Third Party Advisory
• [druid-commits] 20210203 [GitHub] [druid] jihoonson commented on pull request #10826: Address CVE-2020-8570, suppress CVE-2020-8554-Issue Tracking, Mailing List, Third Party Advisory
• [druid-commits] 20210203 [GitHub] [druid] jihoonson merged pull request #10826: Address CVE-2020-8570, suppress CVE-2020-8554-Issue Tracking, Mailing List, Third Party Advisory

 

Keywords

NVD

 

CVE-2020-8570

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures