Debian/kubernetes: medium 6.5
Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a
Action: Upgrade kubernetes to 1.20.5+really1.20.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.20.5+really1.20.2-1 | - |
Fixed versions
| 1.20.5+really1.20.2-1 |
Sources
published · modified · JSON