CVE-2021-25741 - log back

CVE-2021-25741 edited at 16 Sep 2021 08:34:54
Description
- A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.
+ A security issue was discovered in kubelet before version 1.22.2 where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.
CVE-2021-25741 edited at 16 Sep 2021 08:34:14
Severity
- Unknown
+ High
Remote
- Unknown
+ Remote
Type
- Unknown
+ Arbitrary filesystem access
Description
+ A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.
References
+ https://github.com/kubernetes/kubernetes/issues/104980
Notes
+ Workaround
+ ==========
+
+ To mitigate this vulnerability without upgrading kubelet, you can disable the VolumeSubpath feature gate on kubelet and kube-apiserver, and remove any existing Pods making use of the feature.
+
+ You can also use admission control to prevent less-trusted users from running containers as root to reduce the impact of successful exploitation.
CVE-2021-25741 created at 16 Sep 2021 08:30:42