FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Kubectl -- Potential directory traversal

Affected packages
kubectl < 1.11.9
1.12.0 <= kubectl < 1.12.7
1.13.0 <= kubectl < 1.13.5

Details

VuXML ID 6a0129bf-54ad-11e9-987c-1c39475b9f84
Discovery 2019-03-28
Entry 2019-04-01

Kubernetes.io reports:

A security issue was discovered with the Kubernetes kubectl cp command that could enable a directory traversal replacing or deleting files on a user’s workstation.

References

CVE Name CVE-2019-1002101
URL https://nvd.nist.gov/vuln/detail/CVE-2019-1002101