| Package | Affected versions | Patched versions |
|---|---|---|
| kubernetes | = 1.14.0≥ 1.10.0, ≤ 1.13.13 |
Improper validation of URL redirection in the Kubernetes API server in versions prior to v1.14.0 allows an attacker-controlled Kubelet to redirect API server requests from streaming endpoints to arbitrary hosts. Impacted API servers will follow the redirect as a GET request with client-certificate credentials for authenticating to the Kubelet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free