Kubernetes · Kubernetes · CVE-2017-1002102
**Name of the Vulnerable Software and Affected Versions**
Kubernetes versions 1.3.x through 1.6.x
Kubernetes versions 1.7.x through 1.7.13
Kubernetes versions 1.8.x through 1.8.8
Kubernetes versions 1.9.x through 1.9.3
**Description**
The issue allows containers using a secret, configMap, projected or downwardAPI volume to trigger deletion of arbitrary files/directories from the nodes where they are running.
**Recommendations**
For Kubernetes versions 1.3.x through 1.6.x, update to version 1.7.14 or later.
For Kubernetes versions 1.7.x through 1.7.13, update to version 1.7.14 or later.
For Kubernetes versions 1.8.x through 1.8.8, update to version 1.8.9 or later.
For Kubernetes versions 1.9.x through 1.9.3, update to version 1.9.4 or later.