In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with world-writeable permissions (rw-rw-rw-). If --cache-dir is specified and pointed at a different location accessible to other users/groups, the written files may be modified by other users/groups and disrupt the kubectl invocation.

An update of the kubernetes package has been released.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4716 advisory.

    - [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache=<world-accessible dir>'

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4816 advisory.

    - [CVE-2019-16276] Kubernetes Vulnerabilities Allow Authentication Bypass, DoS
    - [CVE-2019-16276] Support patching flannel/dashboard on upgrade
    - [CVE-2019-16276] Support patching etcd on upgrade
    - [CVE-2019-16276] while upgrading a cluster patch the coredns image
    - CVE-2019-16276 : Update flannel , etcd coredns and dashboard images.

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-4717 advisory.

    [0.0.2-1.0.52]
    - [OLCNE-678] Restore fails when trying to restore after a failed update

    [0.0.2-1.0.51]
    - [OLCNE-667] Minor version update doesn't update kubeadm on all master nodes

    [0.0.2-1.0.50]
    - Make k8s 1.14 specific changes

    [0.0.2-1.0.49]
    - [OLCNE-668] Remove 1.10 and 1.11 version since they are incompatable

    [0.0.2-1.0.48]
    - [OLCNE-549] Support deploying 5 master nodes

    [0.0.2-1.0.47]
    - Only update/upgrade the controlplane images if they changed in the Release object

    [0.0.2-1.0.46]
    - [OLCNE-571] Fix version comparison function during upgrade

    [0.0.2-1.0.45]
    - Fix rpm version compare
    - [OLCNE-550] Allow kubernetes updates for patch version

    [0.0.2-1.0.44]
    - [OLCNE-528] Allow assume yes to deploy a single master without the prompt

    [0.0.2-1.0.43]
    - [OLCNE-524] Post cluster creation should check only for master nodes

    [0.0.2-1.0.42]
    - [OLCNE-335] Update keepalived check api server to ensure we are grepping the correct IP

    [0.0.2-1.0.41]
    - [OLCNE-470] Make ha.yaml an optional argument in the cli for single master cluster

    [0.0.2-1.0.40]
    - [OLCNE-486] Add pod cidr default and refactor ha.yaml example

    [0.0.2-1.0.39]
    - [OLCNE-313] Remove features: feature1_13=true from config

    [0.0.2-1.0.38]
    - Default kubernetes version to latest production version

    [0.0.2-1.0.37]
    - [OLCNE-411] Fix keepalived issue when firewalld is disable

    [0.0.2-1.0.36]
    - Default kubernetes version to latest production version

    [0.0.2-1.0.35]
    - Add addons template and config files

    [0.0.2-1.0.34]
    - Enhance tests

    [0.0.2-1.0.33]
    - fix regression of previous firewall fix

    [0.0.2-1.0.32]
    - Fix firewall issues during restore [ OLCNE 343 ]

    [0.0.2-1.0.31]
    - Fix firewall issues [ OLCNE 249, 262 ]

    [0.0.2-1.0.30]
    - Enhance output while validating the system

    [0.0.2-1.0.29]
    - [OLCNE-85] Fix DR in 1.13

    [0.0.2-1.0.28]
    - Fix apiserver_cert_extra_sans for 1.13 clusters

    [0.0.2-1.0.27]
    - Fix update/upgrade output message

    [0.0.2-1.0.26]
    - Fix major upgrade

    [0.0.2-1.0.25]
    - Add registry migration

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0020 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    Security Fix(es):

    * kubernetes: Schema info written with world-writeable permissions when cached (CVE-2019-11244)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3942 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    This advisory contains the openshift container images for Red Hat OpenShift     Container Platform 4.1.24.

    Security Fix(es):

    * A flaw was found in kubectl that leaves http-cache files with read/write permissions for any user. In     conjunction with a non-default value for --cache-dir, this could lead to the cache content being placed in     a location accessible to other users in the system. (CVE-2019-11244)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
202867	Photon OS 2.0: Kubernetes PHSA-2019-2.0-0161	Nessus	PhotonOS Local Security Checks	medium
180728	Oracle Linux 7 : kubernetes (ELSA-2019-4716)	Nessus	Oracle Linux Local Security Checks	medium
180704	Oracle Linux 7 : kubernetes (ELSA-2019-4816)	Nessus	Oracle Linux Local Security Checks	high
180646	Oracle Linux 7 : kubeadm-ha-setup (ELSA-2019-4717)	Nessus	Oracle Linux Local Security Checks	medium
132882	RHEL 7 : OpenShift Container Platform 3.11 atomic-openshift (RHSA-2020:0020)	Nessus	Red Hat Local Security Checks	medium
131218	RHEL 7 / 8 : OpenShift Container Platform 4.1.24 openshift (RHSA-2019:3942)	Nessus	Red Hat Local Security Checks	medium
126472	Photon OS 1.0: Kubernetes PHSA-2019-1.0-0242	Nessus	PhotonOS Local Security Checks	medium
126113	Photon OS 3.0: Kubernetes PHSA-2019-3.0-0015	Nessus	PhotonOS Local Security Checks	medium

Detections

Analytics

CVE-2019-11244

medium

Tenable Plugins

medium

medium

high

medium

medium

medium

medium

medium