WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes
(This report has been withdrawn from the Go vulnerability database with reason: "Low severity issue with no fix available or planned. Likely to cause false positives.").
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-8562US | low3.1 | — | ||
As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven c… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/advisories/GHSA-qh36-44jv-c8xjADVISORY
- https://github.com/kubernetes/kubernetes/issues/101493WEB
- https://github.com/kubernetes/kubernetes/issues/101493#issuecomment-2272095629WEB
- https://groups.google.com/g/kubernetes-security-announce/c/-MFX60_wdOYWEB
- https://security.netapp.com/advisory/ntap-20220225-0002WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan