CWE Code: 22
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary: a flaw was found in source-to-image function as shipped with openshift enterprise 3.x. an improper path validation of tar files in extracttarstreamfromtarreader in tar/tar.go leads to privilege escalation.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-04-30
Last Modified Date: 2019-10-09