EP 15 - Disclosing a directory traversal vulnerability in Kubernetes copy – CVE-2019-1002101

Share:

Cloud Native Security Podcast

Technology


In this special episode, Ariel goes through the details of the latest Kubernetes CVE, CVE-2019-1002101, and explains how containers are vulnerable, what the vulnerability exposes, and how to get the latest kubectl update to mitigate the vulnerability.Link to Twistlock Labs detailed blog post:https://www.twistlock.com/labs-blog/disclosing-directory-traversal-vulnerability-kubernetes-copy-cve-2019-1002101/Link to Twistlock Labs post on CVE-2017-1002101:https://www.twistlock.com/labs-blog/deep-dive-severe-kubernetes-vulnerability-date-cve-2017-1002101/Link to Kubernetes kubectl fix:https://github.com/kubernetes/kubernetes/issues/61297Contact info for Ariel and Twistlock Labs:Ariel - ariel@twistlock.comLabs - labs@twistlock.comTwitter - @twistlocklabs