Security Advisory

CVE-2018-1102

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-04-30 19:00:00
Last updated 2024-08-05 03:51:49
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An improper path validation of tar files in ExtractTarStreamFromTarReader in tar/tar.go leads to privilege escalation.