{"id":"CVE-2015-7561","aliases":["GHSA-2h9c-34v6-3qmr","GO-2023-1985"],"title":"Kubernetes in OpenShift3 Access Control Misconfiguration","summary":"Kubernetes in OpenShift3 Access Control Misconfiguration","severity":"low","cvss":3.1,"cvssVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","vendor":"kubernetes","product":"k8s.io/kubernetes","ecosystem":"go","affected":["k8s.io/kubernetes < 1.2.0-alpha.6"],"patched":["k8s.io/kubernetes 1.2.0-alpha.6"],"published":"2022-05-13","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:49:36.805877040Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-2h9c-34v6-3qmr","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7561"},{"url":"https://github.com/kubernetes/kubernetes/pull/18909"},{"url":"https://github.com/kubernetes/kubernetes/commit/e185b1028ac8459f7b451e1115399192e96f6ee9"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291963"},{"url":"https://github.com/kubernetes/kubernetes"}],"tags":["osv","go"],"epss":0.01746,"epssPercentile":0.76486,"ingestedAt":"2026-09-12T03:13:01.745Z","slug":"CVE-2015-7561","body":"## Overview\n\nKubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image.\n\n## Affected packages\n\n- `k8s.io/kubernetes < 1.2.0-alpha.6`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `k8s.io/kubernetes 1.2.0-alpha.6`","depth":"sunlit","depthScore":17,"depthScoreParts":{"impact":17.1,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}