CVE-2015-7561

Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image.

• CWE-264

• https://bugzilla.redhat.com/show_bug.cgi?id=1291963Issue Tracking, Third Party Advisory, VDB Entry
• https://github.com/kubernetes/kubernetes/pull/18909Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1291963Issue Tracking, Third Party Advisory, VDB Entry
• https://github.com/kubernetes/kubernetes/pull/18909Third Party Advisory

Published

Aug 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7555Heap-based buffer overflow in giffix.c in giffix in giflib 5…
• CVE-2015-7556DeleGate 9.9.13 allows local users to gain privileges as dem…7.8
• CVE-2015-7557The _rsvg_node_poly_build_path function in rsvg-shapes.c in …
• CVE-2015-7558librsvg before 2.40.12 allows context-dependent attackers to…
• CVE-2015-7559It was found that the Apache ActiveMQ client before 5.14.5 e…2.7
• CVE-2015-7560The SMB1 implementation in smbd in Samba 3.x and 4.x before …6.5
• CVE-2015-7562Multiple cross-site scripting (XSS) vulnerabilities in TeamP…
• CVE-2015-7563Cross-site request forgery (CSRF) vulnerability in TeamPass …8.8
• CVE-2015-7564Multiple SQL injection vulnerabilities in TeamPass 2.1.24 an…
• CVE-2015-7565Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x t…
• CVE-2015-7566The clie_5_attach function in drivers/usb/serial/visor.c in …
• CVE-2015-7567SQL injection vulnerability in Yeager CMS 1.2.1 allows remot…9.8