{"id":"CVE-2017-1000056","details":"Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object.","aliases":["GHSA-2jx2-76rc-2v7v","GO-2023-1492"],"modified":"2026-08-07T11:31:32.305701558Z","published":"2017-07-17T13:18:17.750Z","related":["openSUSE-SU-2025:15424-1"],"database_specific":{"unresolved_ranges":[{"vendor_product":"kubernetes:kubernetes","cpes":["cpe:2.3:a:kubernetes:kubernetes:1.5.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.5.0"},{"last_affected":"1.5.0"}],"source":"CPE_STRING"}]},"references":[{"type":"REPORT","url":"https://github.com/kubernetes/kubernetes/issues/43459"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kubernetes/kubernetes","events":[{"introduced":"58b7c16a52c03e4a849874602be42ee71afdcab1"},{"last_affected":"7243c69eb523aa4377bce883e7c0dd76b84709a1"}],"database_specific":{"cpe":["cpe:2.3:a:kubernetes:kubernetes:1.5.0:*:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.5.1:*:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.5.2:*:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.5.3:*:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.5.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.5.0"},{"last_affected":"1.5.0"},{"introduced":"1.5.1"},{"last_affected":"1.5.1"},{"introduced":"1.5.2"},{"last_affected":"1.5.2"},{"introduced":"1.5.3"},{"last_affected":"1.5.3"},{"introduced":"1.5.4"},{"last_affected":"1.5.4"}],"source":"CPE_STRING"}}],"versions":["1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","v1.5.4","v1.5.4-beta.0","v1.5.3","v1.5.3-beta.0","v1.5.2","v1.5.1","v1.5.2-beta.0","v1.5.1-beta.0","v1.5.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000056.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}