WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes
(This report has been withdrawn from the Go vulnerability database with reason: "Low severity issue with no fix available or planned. Likely to cause false positives.").
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-8562US | low3.1 | — | ||
As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven c… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/advisories/GHSA-qh36-44jv-c8xjADVISORY
- https://github.com/kubernetes/kubernetes/issues/101493WEB
- https://github.com/kubernetes/kubernetes/issues/101493#issuecomment-2272095629WEB
- https://groups.google.com/g/kubernetes-security-announce/c/-MFX60_wdOYWEB
- https://security.netapp.com/advisory/ntap-20220225-0002WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan