CVE-2019-11247

score

<0.1

cvss

8.1

epss

2.1%

published

2019-08-29

kev added

—

first seen

2026-10-21

Kubernetes kube-apiserver prior to 1.13.9, 1.14.5, 1.15.2, and versions 1.7 to 1.12 contain a privilege escalation caused by mistaken access control enforcement for cluster-scoped custom resources, letting users with namespace-only access manipulate cluster-wide resources, exploit requires crafted API requests.