{"id":"CVE-2017-1002102","aliases":["GHSA-mm7g-f2gg-cw8g","GO-2023-1977"],"url":"https://o3.security/vulnerability/CVE-2017-1002102","summary":"Kubernetes arbitrary file overwrite","details":"In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running.","published":"2018-03-13T17:29:00.280Z","modified":"2026-08-07T14:48:50.323445Z","cvss":{"score":5.6,"severity":"MEDIUM","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Go","name":"k8s.io/kubernetes","fixedVersion":"1.7.14"},{"ecosystem":"Go","name":"k8s.io/kubernetes","fixedVersion":"1.8.9"},{"ecosystem":"Go","name":"k8s.io/kubernetes","fixedVersion":"1.9.4"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:0475"},{"type":"REPORT","url":"https://github.com/kubernetes/kubernetes/issues/60814"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T14:48:50.323445Z"}}