En resumen
- CVE-2020-8561 es una vulnerabilidad MEDIO (CVSS 4.1) que afecta a k8s.io/kubernetes, kubernetes (kubernetes).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.1%, mayor que el 81.7% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs when the log level is set to 10, they can view the redirected responses and headers in the logs.
NVD description
A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs when the log level is set to 10, they can view the redirected responses and headers in the logs.
Más vulnerabilidades de k8s.io/kubernetes
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free