← CVE Intelligence

CVE-2019-11255

Kubernetes CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation PUBLISHED

Description (CNA)

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshotter (<v0.4.2, <v1.0.2, v1.1, <1.2.2), and external-resizer (v0.1, v0.2) could result in unauthorized PersistentVolume data access or volume mutation during snapshot, restore from snapshot, cloning and resizing operations.

Affected (CNA)

Vendor / productVersions
Kubernetes / kubernetes-csi external-provisioneraffected prior to 1.0.2; affected 1.1; affected prior to 1.2.2; affected prior to 1.3.1; affected v1.14 before prior to 0.4.3
Kubernetes / kubernetes-csi external-snapshotteraffected prior to 0.4.2; affected prior to 1.0.2; affected 1.1; affected prior to 1.2.2
Kubernetes / kubernetes-csi external-resizeraffected 0.1; affected 0.2

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.