En bref
- CVE-2020-10749 est une vulnérabilité MOYENNE (CVSS 6.0) touchant github.com/containernetworking/plugins, cni network plugins (linuxfoundation), openshift container platform (redhat).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.1%, plus élevée que 81.6% des vulnérabilités.
- Correctif : mettre à jour vers 0.8.6 ou plus récent.
Description
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
NVD description
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
Autres vulnérabilités de github.com/containernetworking/plugins
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free