First published: Thu Sep 15 2022(Updated: )
Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.
Credit: jordan@liggitt.net
Affected Software | Affected Version | How to fix |
---|---|---|
Kubernetes Kubernetes | >=1.24.0<1.24.5 | |
Kubernetes Kubernetes | >=1.23.0<1.23.11 | |
Kubernetes Kubernetes | >=1.22.0<1.22.14 | |
Kubernetes Kubernetes | >=1.20.0<=1.21.0 | |
redhat/kubelet | <1.22.14 | 1.22.14 |
redhat/kubelet | <1.23.11 | 1.23.11 |
redhat/kubelet | <1.23.5 | 1.23.5 |
redhat/kubelet | <1.25.0 | 1.25.0 |
To mitigate these vulnerabilities, upgrade Kubernetes: https://kubernetes.io/docs/tasks/administer-cluster/cluster-management/#upgrading-a-cluster
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2021-25749.
The affected software is Kubernetes with versions between 1.20.0 and 1.24.5.
The severity of CVE-2021-25749 is high.
This vulnerability allows Windows workloads to run as a ContainerAdministrator even when the workloads set the runAsNonRoot option to true.
To fix CVE-2021-25749, update Kubernetes to version 1.25.0 or apply the necessary patches provided by Red Hat.