Privilege Escalation in Kubernetes in k8s.io/apimachinery
The Kubernetes kube-apiserver is vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-8559US | medium6.8 | Exploit | ||
The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://bugzilla.redhat.com/show_bug.cgi?id=1851422WEB
- https://github.com/advisories/GHSA-33c5-9fx5-fvjmADVISORY
- https://github.com/kubernetes/kubernetes/issues/92914WEB
- https://github.com/kubernetes/kubernetes/pull/92941WEB
- https://github.com/tdwyer/CVE-2020-8559WEB
- https://groups.google.com/d/msg/kubernetes-security-announce/JAIGG5yNROs/19nHQ5wkBwAJWEB
- https://groups.google.com/g/kubernetes-security-announce/c/JAIGG5yNROsWEB
- https://security.netapp.com/advisory/ntap-20200810-0004WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan