{"id":"CVE-2017-1002100","details":"Default access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure cloud provider in versions 1.6.0 to 1.6.5 are set to \"container\" which exposes a URI that can be accessed without authentication on the public internet. Access to the URI string requires privileged access to the Kubernetes cluster or authenticated access to the Azure portal.","modified":"2026-07-08T05:49:27.087340915Z","published":"2017-09-14T13:29:01.373Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"1.6.0"},{"last_affected":"1.6.0"}],"source":"CPE_STRING","vendor_product":"kubernetes:kubernetes","cpes":["cpe:2.3:a:kubernetes:kubernetes:1.6.0:*:*:*:*:*:*:*"]}]},"references":[{"type":"FIX","url":"https://github.com/kubernetes/kubernetes/issues/47611"},{"type":"FIX","url":"https://groups.google.com/d/msg/kubernetes-security-announce/n3VBg_WJZic/-ddIqKXqAAAJ"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kubernetes/kubernetes","events":[{"introduced":"fff5156092b56e6bd60fff75aad4dc9de6b6ef37"},{"last_affected":"00fb653e406a4b5bbac71a10c3e330afef960f13"}],"database_specific":{"extracted_events":[{"introduced":"1.6.0"},{"last_affected":"1.6.0"},{"introduced":"1.6.0-alpha\\.0"},{"last_affected":"1.6.0-alpha\\.0"},{"introduced":"1.6.0-alpha\\.1"},{"last_affected":"1.6.0-alpha\\.1"},{"introduced":"1.6.0-alpha\\.2"},{"last_affected":"1.6.0-alpha\\.2"},{"introduced":"1.6.0-alpha\\.3"},{"last_affected":"1.6.0-alpha\\.3"},{"introduced":"1.6.0-beta\\.0"},{"last_affected":"1.6.0-beta\\.0"},{"introduced":"1.6.0-beta\\.1"},{"last_affected":"1.6.0-beta\\.1"},{"introduced":"1.6.0-beta\\.2"},{"last_affected":"1.6.0-beta\\.2"},{"introduced":"1.6.0-beta\\.3"},{"last_affected":"1.6.0-beta\\.3"},{"introduced":"1.6.0-beta\\.4"},{"last_affected":"1.6.0-beta\\.4"},{"introduced":"1.6.0-rc\\.1"},{"last_affected":"1.6.0-rc\\.1"},{"introduced":"1.6.1"},{"last_affected":"1.6.1"},{"introduced":"1.6.1-beta\\.0"},{"last_affected":"1.6.1-beta\\.0"},{"introduced":"1.6.2"},{"last_affected":"1.6.2"},{"introduced":"1.6.2-beta\\.0"},{"last_affected":"1.6.2-beta\\.0"},{"introduced":"1.6.3"},{"last_affected":"1.6.3"},{"introduced":"1.6.3-beta\\.0"},{"last_affected":"1.6.3-beta\\.0"},{"introduced":"1.6.3-beta\\.1"},{"last_affected":"1.6.3-beta\\.1"},{"introduced":"1.6.4"},{"last_affected":"1.6.4"},{"introduced":"1.6.4-beta\\.0"},{"last_affected":"1.6.4-beta\\.0"},{"introduced":"1.6.4-beta\\.1"},{"last_affected":"1.6.4-beta\\.1"},{"introduced":"1.6.5"},{"last_affected":"1.6.5"},{"introduced":"1.6.5-beta\\.0"},{"last_affected":"1.6.5-beta\\.0"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:kubernetes:kubernetes:1.6.0:*:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.0:alpha.0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.0:alpha.1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.0:alpha.2:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.0:alpha.3:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.0:beta.0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.0:beta.1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.0:beta.2:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.0:beta.3:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.0:beta.4:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.0:rc.1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.1:*:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.1:beta.0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.2:*:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.2:beta.0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.3:*:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.3:beta.0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.3:beta.1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.4:*:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.4:beta.0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.4:beta.1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.5:*:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.6.5:beta.0:*:*:*:*:*:*"]}}],"versions":["1.6.0","1.6.0-alpha\\.0","1.6.0-alpha\\.1","1.6.0-alpha\\.2","1.6.0-alpha\\.3","1.6.0-beta\\.0","1.6.0-beta\\.1","1.6.0-beta\\.2","1.6.0-beta\\.3","1.6.0-beta\\.4","1.6.0-rc\\.1","1.6.1","1.6.1-beta\\.0","1.6.2","1.6.2-beta\\.0","1.6.3","1.6.3-beta\\.0","1.6.3-beta\\.1","1.6.4","1.6.4-beta\\.0","1.6.4-beta\\.1","1.6.5","1.6.5-beta\\.0","v1.6.3","v1.6.5-beta.0","v1.6.4-beta.0","v1.6.3-beta.0","v1.6.2","v1.6.2-beta.0","v1.6.1","v1.6.1-beta.0","v1.6.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1002100.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}