Access Restriction Bypass in kubernetes

Description

References

• nvd.nist.gov/vuln/detail/CVE-2016-1905 · ADVISORY
• kubernetes/kubernetes · WEB
• kubernetes/kubernetes commit 9e69123 · WEB
• access.redhat.com/errata/RHSA-2016:0070 · WEB
• access.redhat.com/errata/RHSA-2016:0351 · WEB
• access.redhat.com/security/cve/CVE-2016-1905 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• GitHub Advisory GHSA-xx8c-m748-xr4j · ADVISORY

Autres vulnérabilités de github.com/kubernetes/kubernetes

• CVE-2022-3294ÉLEVÉE 8.8Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modif…
• CVE-2022-3162MOYENNE 6.5Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the s…
• CVE-2020-8566MOYENNE 5.5In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to l…
• CVE-2020-8564MOYENNE 5.5In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the doc…
• CVE-2020-8563MOYENNE 5.5In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked i…