VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 17, 2017· Updated Jun 17, 2026

CVE-2017-1000056

CVE-2017-1000056

Description

Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
k8s.io/kubernetesGo
>= 1.5.0, < 1.5.51.5.5

Affected products

7
  • Cri O/Kubernetes5 versions
    cpe:2.3:a:kubernetes:kubernetes:1.5.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:kubernetes:kubernetes:1.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:kubernetes:kubernetes:1.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:kubernetes:kubernetes:1.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:kubernetes:kubernetes:1.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:kubernetes:kubernetes:1.5.4:*:*:*:*:*:*:*
  • ghsa-coords2 versions
    pkg:golang/k8s.io/kubernetespkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed
    >= 1.5.0, < 1.5.5+ 1 more
    • (no CPE)range: >= 1.5.0, < 1.5.5
    • (no CPE)range: < 0.0.20250807T150727-1.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.