Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioning a privileged container. Fixed in MicroK8s 1.15.3.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Microk8s | Canonical | * | 1.15.3 (excluding) |
| Microk8s | Ubuntu | snap | * |
| Microk8s | Ubuntu | upstream | * |