Kubernetes CVE-2019-11244 Local Unauthorized Access Vulnerability

Bugtraq ID:	108064
Class:	Design Error
CVE:	CVE-2019-11244
Remote:	No
Local:	Yes
Published:	Apr 22 2019 12:00AM
Updated:	Apr 22 2019 12:00AM
Credit:	jzebor
Vulnerable:	Kubernetes Kubernetes 1.14 Kubernetes Kubernetes 1.13.5 Kubernetes Kubernetes 1.13.4 Kubernetes Kubernetes 1.13.3 Kubernetes Kubernetes 1.13 Kubernetes Kubernetes 1.12.7 Kubernetes Kubernetes 1.12.6 Kubernetes Kubernetes 1.12.5 Kubernetes Kubernetes 1.12.4 Kubernetes Kubernetes 1.12.3 Kubernetes Kubernetes 1.12.2 Kubernetes Kubernetes 1.12.1 Kubernetes Kubernetes 1.12 Kubernetes Kubernetes 1.11.9 Kubernetes Kubernetes 1.11.8 Kubernetes Kubernetes 1.11.7 Kubernetes Kubernetes 1.11.6 Kubernetes Kubernetes 1.11.5 Kubernetes Kubernetes 1.11.4 Kubernetes Kubernetes 1.11.3 Kubernetes Kubernetes 1.11.2 Kubernetes Kubernetes 1.11.1 Kubernetes Kubernetes 1.11 Kubernetes Kubernetes 1.10.12 Kubernetes Kubernetes 1.10.11 Kubernetes Kubernetes 1.10.10 Kubernetes Kubernetes 1.10.9 Kubernetes Kubernetes 1.10.8 Kubernetes Kubernetes 1.10.7 Kubernetes Kubernetes 1.10.6 Kubernetes Kubernetes 1.10.5 Kubernetes Kubernetes 1.10.4 Kubernetes Kubernetes 1.10.3 Kubernetes Kubernetes 1.10.2 Kubernetes Kubernetes 1.10.1 Kubernetes Kubernetes 1.10 Kubernetes Kubernetes 1.9.10 Kubernetes Kubernetes 1.9.9 Kubernetes Kubernetes 1.9.8 Kubernetes Kubernetes 1.9.7 Kubernetes Kubernetes 1.9.6 Kubernetes Kubernetes 1.9.5 Kubernetes Kubernetes 1.9.4 Kubernetes Kubernetes 1.9.3 Kubernetes Kubernetes 1.9.2 Kubernetes Kubernetes 1.9.1 Kubernetes Kubernetes 1.9 Kubernetes Kubernetes 1.8
Not Vulnerable:

Kubernetes CVE-2019-11244 Local Unauthorized Access Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.