Kurz gesagt
- CVE-2020-10749 ist eine Schwachstelle (MITTEL (CVSS 6.0)) in github.com/containernetworking/plugins, cni network plugins (linuxfoundation), openshift container platform (redhat).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.1%, höher als bei 81.6% aller Schwachstellen.
- Abhilfe: auf 0.8.6 oder neuer aktualisieren.
Description
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
NVD description
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
Weitere Schwachstellen in github.com/containernetworking/plugins
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free