[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkd__vsdk5YAlBp5Qf7HpMKbG6-6OSdutNfxoy2c3Rao":3,"g5a-risk:CVE-2017-1002101":162},{"success":4,"data":5,"meta":160},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":50,"epssPercentile":15,"epssTimeSeries":51,"severity":52,"affectedProducts":53,"affectedProductsCount":58,"references":59,"referencesCount":80,"weaknesses":81,"weaknessesCount":58,"isActivelyExploited":90,"cisaInfo":15,"otxData":15,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":151,"notableEvents":152},"CVE-2017-1002101","What is CVE-2017-1002101?","In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files\u002Fdirectories outside of the volume, including the host's filesystem.","In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (...","2018-03-13T17:29:00.233","2019-10-09T23:21:25.697",9.6,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":39,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",3.1,5.8,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":38},"jordan@liggitt.net","Secondary",{"Version":21,"VectorString":34,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":35,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":36,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","UNCHANGED",8.8,2.8,5.9,[40],{"Source":18,"Type":19,"CVSSData":41,"BaseSeverity":47,"ExploitabilityScore":48,"ImpactScore":49,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":42,"VectorString":43,"AccessVector":22,"AccessComplexity":23,"Authentication":44,"ConfidentialityImpact":45,"IntegrityImpact":45,"AvailabilityImpact":24,"BaseScore":46,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:N","SINGLE","PARTIAL",5.5,"MEDIUM",8,4.9,0.1292,[50,50,50,50,50,50,50],"Critical",[54],{"vendor":55,"product":55,"version":56,"criteria":57,"vulnerable":4},"kubernetes","*","cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",1,[60,64,69,74],{"url":61,"source":62,"tags":63},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-04\u002Fmsg00041.html","Opensuse",[],{"url":65,"source":66,"tags":67},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:0475","Red Hat",[68],"Third Party Advisory",{"url":70,"source":71,"tags":72},"https:\u002F\u002Fgithub.com\u002Fbgeesaman\u002Fsubpath-exploit\u002F","GitHub",[73,68],"Exploit",{"url":75,"source":71,"tags":76},"https:\u002F\u002Fgithub.com\u002Fkubernetes\u002Fkubernetes\u002Fissues\u002F60813",[77,78,79],"Issue Tracking","Mitigation","Vendor Advisory",4,[82],{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":88,"structure":89},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2017-1002101? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-1002101, a critical severity cyber security vulnerability from 2018. In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and...","CVE-2017-1002101, CVE-2017-1002101 vulnerability, CVE-2017-1002101 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, kubernetes security, kubernetes vulnerability","\u002Fwhat-is\u002Fcve-2017-1002101",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-1002101","Cybersecurity","CVE-2017-1002101, CVE-2017-1002101 vulnerability, CVE-2017-1002101 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118],{"Operator":15,"Negate":15,"Nodes":119},[120],{"Operator":121,"Negate":15,"CPEMatch":122},"OR",[123,127,131,135,139,143,147],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":124,"VersionStartExcluding":15,"VersionStartIncluding":125,"VersionEndExcluding":15,"VersionEndIncluding":126},"85841C2A-31F1-4725-BE9D-0E346D133CC9","1.3.0","1.3.10",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":128,"VersionStartExcluding":15,"VersionStartIncluding":129,"VersionEndExcluding":15,"VersionEndIncluding":130},"3CE7BB45-879A-48CE-BE8B-463CB97B8ABA","1.4.0","1.4.12",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":132,"VersionStartExcluding":15,"VersionStartIncluding":133,"VersionEndExcluding":15,"VersionEndIncluding":134},"0990DE9E-F42A-42E5-9589-ACFCD79950E5","1.5.0","1.5.8",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":136,"VersionStartExcluding":15,"VersionStartIncluding":137,"VersionEndExcluding":15,"VersionEndIncluding":138},"520D312F-37C8-4604-B4C3-D9DB8317CF9F","1.6.0","1.6.13",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":140,"VersionStartExcluding":15,"VersionStartIncluding":141,"VersionEndExcluding":142,"VersionEndIncluding":15},"F39F83C4-3CC3-4681-8363-0986209D4E2B","1.7.0","1.7.14",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":144,"VersionStartExcluding":15,"VersionStartIncluding":145,"VersionEndExcluding":146,"VersionEndIncluding":15},"CEE0979F-ED58-43D8-9E3B-7261B1782DD2","1.8.0","1.8.9",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":148,"VersionStartExcluding":15,"VersionStartIncluding":149,"VersionEndExcluding":150,"VersionEndIncluding":15},"E4818E0C-B0ED-424F-AD73-B87777FD9D9E","1.9.0","1.9.4",[],[153],{"id":154,"eventType":155,"eventTime":156,"details":157,"label":158,"color":159},"647f97da-f3ae-4cdc-a0c0-7253c9c45878","LOW_EPSS_DELTA","2026-06-16T04:06:27.972787+00:00","Daily EPSS score decreased by 0.219 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":161,"version":42},1792248184792,{"score":163,"band":164,"action":165,"scoredAt":166},53,"Medium","Plan remediation","2026-10-16T06:43:34.592787+00:00"]