kube-hunter/docs/_kb/KHV026.md

vid, title, categories, severity

vid	title	categories	severity
KHV026	Arbitrary Access To Cluster Scoped Resources	PrivilegeEscalation	high

{{ page.vid }} - {{ page.title }}

Issue description

Cluster is found to be vulnerable to CVE-2019-11247. Please see the Vulnerability description for additional information.

Remediation

Please see the Vulnerability description for remediation.

References

• CVE-2019-11247: API server allows access to custom resources via wrong scope
• CVE-2019-11247