Skip to main content
Version: latest

GHSA-27WF-5967-98GX

CVE Details

Visit the official vulnerability details page for GHSA-27WF-5967-98GX to learn more.

Initial Publication

11/24/2024

Last Update

11/24/2024

Third Party Dependency

k8s.io/kubernetes

NIST CVE Summary

Kubernetes kubelet arbitrary command execution

CVE Severity

8.1

Our Official Summary

This vulnerability is a false positive. Although this is reported by the scanning tools on some of the components, further checks indicate the symbol/function with the vulnerability while present is not being used.

Status

Ongoing

Affected Products & Versions

This CVE is non-impacting as the impacting symbol and/or function is not used in the product

Revision History

DateRevision
11/25/2024Status changed from Open to Ongoing
11/24/2024Impacted versions changed from 4.5.10 to 4.5.10, 4.4.20