← CVE Intelligence

CVE-2021-25749

runAsNonRoot logic bypass for Windows containers PUBLISHED

Description (CNA)

Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.

Affected (CNA)

Vendor / productVersions
Kubernetes / Kubernetesaffected kubelet v1.22.0 - v1.22.13 before v1.22.14; affected kubelet v1.23.0 - v1.23.10 before v1.23.11; affected kubelet v1.24.0 - v1.24.4 before v1.24.5

CWE

CWE-284

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.