DeutschShown in its original language — a full translation is planned for a future version.
Kubernetes: Mehrere Schwachstellen
view advisory published 2021-09-15
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kubernetes ausnutzen, um Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-25741US | high8.1 | Exploit | ||
A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, includi… | ||||
| CVE-2020-8561US | medium4.1 | — | ||
A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirec… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2021:3631 vom 2021-09-28external
- Red Hat Security Advisory RHSA-2021:3632 vom 2021-09-27external
- Red Hat Security Advisory RHSA-2021:3635 vom 2021-09-29external
- Red Hat Security Advisory RHSA-2021:3642 vom 2021-09-29external
- Red Hat Security Advisory RHSA-2021:3646 vom 2021-09-30external
- Kubernetes Security Advisory vom 2021-09-15external
- Kubernetes Security Advisory vom 2021-09-15external
- Oracle Linux Security Advisory ELSA-2021-9526 vom 2021-11-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan