Database/Container, Kubernetes & orchestration
Kubernetes (kube-apiserver): Cluster-scoped custom resources reachable through namespaced requests, so namespace-scoped
CVE-2019-11247Container, Kubernetes & orchestrationcurated
Impact
Cluster-scoped custom resources reachable through namespaced requests, so namespace-scoped RBAC grants cluster-wide CR access
Who can reach it
Cluster user with namespace access
What to do
Rolling control-plane upgrade; no GPU drain. Audit CRD RBAC afterwards
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.