Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes
Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-25735US | medium6.5OT elevated | Exploit | ||
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they r… | ||||
02
references
External citations — patches, advisories, analysis.
- https://bugzilla.redhat.com/show_bug.cgi?id=1937562WEB
- https://github.com/advisories/GHSA-g42g-737j-qx6jADVISORY
- https://github.com/kubernetes/kubernetes/commit/00e81db174ef7aca497be5f42d87e46d14df2a90WEB
- https://github.com/kubernetes/kubernetes/issues/100096WEB
- https://github.com/kubernetes/kubernetes/pull/99946WEB
- https://groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9YWEB
- https://pkg.go.dev/k8s.io/kubernetes@v1.23.5/cmd/kube-apiserverWEB
- https://sysdig.com/blog/cve-2021-25735-kubernetes-admission-bypassWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan