CVE-2020-8555

lowPriorität · verfolgen · 26EPSS 0.037 · 90. PerzentilDEEUFRUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

3.68% (90th) EPSS

CVSS 3.5 · low

Is it mine?

56 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · osv · cert_bund

EPSS · bewertet 2026-10-27

The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows certain authorized users to leak up to 500 bytes of arbitrary information from unprotected endpoints within the master's host network (such as link-local or loopback services).

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenopenshift-0:4.3.25-202006060952.git.1.96c30f6.el7.src as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.25, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2440
Behobenopenshift-0:4.3.25-202006060952.git.1.96c30f6.el8.src as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.25, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2440
Behobenopenshift-hyperkube-0:4.3.25-202006060952.git.1.96c30f6.el7.ppc64le as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.25, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2440
Behobenopenshift-hyperkube-0:4.3.25-202006060952.git.1.96c30f6.el7.s390x as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.25, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2440
Behobenopenshift-hyperkube-0:4.3.25-202006060952.git.1.96c30f6.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.25, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2440
Behobenopenshift-hyperkube-0:4.3.25-202006060952.git.1.96c30f6.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.25, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2440
Behobenopenshift-hyperkube-0:4.3.25-202006060952.git.1.96c30f6.el8.s390x as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.25, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2440
Behobenopenshift-hyperkube-0:4.3.25-202006060952.git.1.96c30f6.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.25, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2440
Behobenopenshift4/ose-hyperkube@sha256:2d8d0beae7c6ac6eea010224d3df5b32477a1ba87ee345745698a0fcd3a7cc83_ppc64le as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.25, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2441
Behobenopenshift4/ose-hyperkube@sha256:50eb07078ebeb62e620e64c871803776dd665decc0b5ad5be4e39a6caf97e9e1_s390x as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.25, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2441
Behobenopenshift4/ose-hyperkube@sha256:d196b0a4f412f63720e360957433b6daf48c88f6f23796f81443e01f86218a19_amd64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
For OpenShift Container Platform 4.3 see the following documentation, which will be updated shortly for release 4.3.25, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.3/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2441
Behobenopenshift-0:4.4.0-202006061254.git.1.dc84fb4.el7.src as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
For OpenShift Container Platform 4.4 see the following documentation, which will be updated shortly for release 4.4.8, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2448
Behobenopenshift-0:4.4.0-202006061254.git.1.dc84fb4.el8.src as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
For OpenShift Container Platform 4.4 see the following documentation, which will be updated shortly for release 4.4.8, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2448
Behobenopenshift-hyperkube-0:4.4.0-202006061254.git.1.dc84fb4.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
For OpenShift Container Platform 4.4 see the following documentation, which will be updated shortly for release 4.4.8, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2448
Behobenopenshift-hyperkube-0:4.4.0-202006061254.git.1.dc84fb4.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
For OpenShift Container Platform 4.4 see the following documentation, which will be updated shortly for release 4.4.8, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2448
Behobenopenshift4/ose-hyperkube@sha256:1654cacf069e4ce3ab874df3a90d6e93e6b8ead14e24924bf5115c143d566bcd_s390x as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
For OpenShift Container Platform 4.4 see the following documentation, which will be updated shortly for release 4.4.8, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2449
Behobenopenshift4/ose-hyperkube@sha256:200044e6cdf56f067c1aaace4fde3215593e3e3152ff8600527077d35adc8d4e_ppc64le as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
For OpenShift Container Platform 4.4 see the following documentation, which will be updated shortly for release 4.4.8, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2449
Behobenopenshift4/ose-hyperkube@sha256:ec018bd232f6555bd7ce9e1c63cf4b19c95576c40e9868f2b9eb3127d61180e1_amd64 as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
For OpenShift Container Platform 4.4 see the following documentation, which will be updated shortly for release 4.4.8, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2449
Behobenopenshift-0:4.2.36-202006211650.p0.git.0.1fe246f.el7.src as a component of Red Hat OpenShift Container Platform 4.2redhat_csaf
For OpenShift Container Platform 4.2 see the following documentation, which will be updated shortly for release 4.2.36, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.2/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2594
Behobenopenshift-0:4.2.36-202006211650.p0.git.0.1fe246f.el8.src as a component of Red Hat OpenShift Container Platform 4.2redhat_csaf
For OpenShift Container Platform 4.2 see the following documentation, which will be updated shortly for release 4.2.36, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.2/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2594
Behobenopenshift-hyperkube-0:4.2.36-202006211650.p0.git.0.1fe246f.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.2redhat_csaf
For OpenShift Container Platform 4.2 see the following documentation, which will be updated shortly for release 4.2.36, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.2/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2594
Behobenopenshift-hyperkube-0:4.2.36-202006211650.p0.git.0.1fe246f.el8.s390x as a component of Red Hat OpenShift Container Platform 4.2redhat_csaf
For OpenShift Container Platform 4.2 see the following documentation, which will be updated shortly for release 4.2.36, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.2/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2594
Behobenopenshift-hyperkube-0:4.2.36-202006211650.p0.git.0.1fe246f.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.2redhat_csaf
For OpenShift Container Platform 4.2 see the following documentation, which will be updated shortly for release 4.2.36, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.2/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:2594
Workaroundopenshift-0:4.3.25-202006060952.git.1.96c30f6.el7.src as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-0:4.3.25-202006060952.git.1.96c30f6.el8.src as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-hyperkube-0:4.3.25-202006060952.git.1.96c30f6.el7.ppc64le as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-hyperkube-0:4.3.25-202006060952.git.1.96c30f6.el7.s390x as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-hyperkube-0:4.3.25-202006060952.git.1.96c30f6.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-hyperkube-0:4.3.25-202006060952.git.1.96c30f6.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-hyperkube-0:4.3.25-202006060952.git.1.96c30f6.el8.s390x as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-hyperkube-0:4.3.25-202006060952.git.1.96c30f6.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift4/ose-hyperkube@sha256:2d8d0beae7c6ac6eea010224d3df5b32477a1ba87ee345745698a0fcd3a7cc83_ppc64le as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift4/ose-hyperkube@sha256:50eb07078ebeb62e620e64c871803776dd665decc0b5ad5be4e39a6caf97e9e1_s390x as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift4/ose-hyperkube@sha256:d196b0a4f412f63720e360957433b6daf48c88f6f23796f81443e01f86218a19_amd64 as a component of Red Hat OpenShift Container Platform 4.3redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-0:4.4.0-202006061254.git.1.dc84fb4.el7.src as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-0:4.4.0-202006061254.git.1.dc84fb4.el8.src as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-hyperkube-0:4.4.0-202006061254.git.1.dc84fb4.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-hyperkube-0:4.4.0-202006061254.git.1.dc84fb4.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift4/ose-hyperkube@sha256:1654cacf069e4ce3ab874df3a90d6e93e6b8ead14e24924bf5115c143d566bcd_s390x as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift4/ose-hyperkube@sha256:200044e6cdf56f067c1aaace4fde3215593e3e3152ff8600527077d35adc8d4e_ppc64le as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift4/ose-hyperkube@sha256:ec018bd232f6555bd7ce9e1c63cf4b19c95576c40e9868f2b9eb3127d61180e1_amd64 as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-0:4.2.36-202006211650.p0.git.0.1fe246f.el7.src as a component of Red Hat OpenShift Container Platform 4.2redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-0:4.2.36-202006211650.p0.git.0.1fe246f.el8.src as a component of Red Hat OpenShift Container Platform 4.2redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-hyperkube-0:4.2.36-202006211650.p0.git.0.1fe246f.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.2redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-hyperkube-0:4.2.36-202006211650.p0.git.0.1fe246f.el8.s390x as a component of Red Hat OpenShift Container Platform 4.2redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC
Workaroundopenshift-hyperkube-0:4.2.36-202006211650.p0.git.0.1fe246f.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.2redhat_csaf
Restrict use of the vulnerable volume type and restrict StorageClass write permissions via RBAC

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.5–6.3

v2.03.5lowAV:N/AC:M/Au:S/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 6.8 · Auswirkung 2.9

v3.16.3mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 4

v3.16.3mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:Nsecondary · ENISA EU

v3.16.3mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:Nsecondary · jordan@liggitt.netAusnutzbarkeit 1.8 · Auswirkung 4

v3.16.3mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:Nsecondary · OSV

v3.15.8mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.16.3mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:Nsecondary · Red Hat Product Security US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-918USprimärCWE-200USCWE-918US

betroffene Produkte (56)

Betroffene Produkte und Versionsbereiche.

IBM DB2alle Versionencert_bundDEcpe:/a:ibm:db2:-
IBM DB2 On Openshift <11.5.7.0-cn5alle Versionencert_bundDE
IBM DB2 on Cloud Pak for Data <4.5.0alle Versionencert_bundDE
IBM MQalle Versionencert_bundDEcpe:/a:ibm:mq:-
IBM DB2≤ On Openshift <11.5.7.0-cn5cert_bundDE
IBM DB2≤ on Cloud Pak for Data <4.5.0cert_bundDE
Kubernetes Kubernetes≤ 1.9enisa_euvdEU
Kubernetes Kubernetes≤ 1.14enisa_euvdEU
Kubernetes Kubernetes≤ 1.18.0enisa_euvdEU
Kubernetes Kubernetes≤ 1.8enisa_euvdEU
Kubernetes Kubernetes≤ 1.3enisa_euvdEU
Kubernetes Kubernetes≤ 1.10enisa_euvdEU
Kubernetes Kubernetes≤ 1.6enisa_euvdEU
Kubernetes Kubernetes≤ 1.2enisa_euvdEU
Kubernetes Kubernetes≤ 1.11enisa_euvdEU
Kubernetes Kubernetes≤ 1.12enisa_euvdEU
Kubernetes Kubernetes≤ 1.7enisa_euvdEU
Kubernetes Kubernetes≤ 1.4enisa_euvdEU
Kubernetes Kubernetes≤ 1.13enisa_euvdEU
Kubernetes Kubernetes≤ 1.5enisa_euvdEU

20 von 56 angezeigt

Advisories (9)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2020:2440Red Hat Security Advisory: OpenShift Container Platform 4.3.25 openshift security update2020-06-17csaf · redhat_csafUS
An update for openshift is now available for Red Hat OpenShift Container Platform 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2020:2441Red Hat Security Advisory: OpenShift Container Platform 4.3.25 openshift-enterprise-hyperkube-container security update2020-06-17csaf · redhat_csafUS
An update for openshift-enterprise-hyperkube-container is now available for Red Hat OpenShift Container Platform 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2020:2448Red Hat Security Advisory: OpenShift Container Platform 4.4.8 openshift security update2020-06-17csaf · redhat_csafUS
An update for openshift is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2020:2449Red Hat Security Advisory: OpenShift Container Platform 4.4.8 openshift-enterprise-hyperkube-container security update2020-06-17csaf · redhat_csafUS
An update for openshift-enterprise-hyperkube-container is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2020:2594Red Hat Security Advisory: OpenShift Container Platform 4.2.36 openshift security update2020-07-01csaf · redhat_csafUS
An update for openshift is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
WID-SEC-W-2022-0510IBM DB2: Mehrere SchwachstellenDeutsch2022-06-29csaf · cert_bundDE
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.
GHSA-x6mj-w4jf-jmgwServer Side Request Forgery (SSRF) in Kubernetes2022-02-15ghsa · osvUS
The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows certain authorized users to leak up to 500 bytes of arbitrary information from unprotected endpoints within the master's host network (such as link-local or loopback services).
CERTFR-2026-AVI-1385Multiples vulnérabilités dans les produits VMwareFrançais2026-10-26vendor · certfrFR
GO-2022-0890Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes2024-08-21vendor · osvUS
Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd osv cert_bund redhat_csaf certfr NVD CVE.org MITRE

veröffentlicht 2020-06-05geändert 2026-06-17

verwandt (4,184)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-96655US	—OT kritisch	1.64% (76th)	KEV	2026-09-23
Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter.
CVE-2026-96652US	—OT kritisch	1.82% (79th)	KEV	2026-09-23
Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and force the…
CVE-2026-83548US	—OT kritisch	8.04% (95th)	KEV	2026-09-01
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could pot…
CVE-2026-64849US	—OT kritisch	10.0% (96th)	KEV	2026-08-17
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /ap…
CVE-2026-15410US	—OT kritisch	11.8% (96th)	KEV	2026-07-14
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific…

+4179 weitere

Referenzen (30)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan