Skip to content
[CVE-2020-28914] Big Bugs: Bitbucket Pipelines Kata Containers Build Container Escape
bugcrowd.com | vulnerability | CVE-2020-28914 | #container-security | #container-escape | #cve-2020-28914 | #kata-containers | #bitbucket-pipelines | #ci-cd-security | #atlassian
Summary
A Kata Containers flaw (CVE-2020-28914) let processes in the Kata VM write to read-only volume mounts, so a malicious build job could overwrite host files as root via Bitbucket Pipelines.
- Published
- Collected