En bref
- CVE-2020-8553 est une vulnérabilité MOYENNE (CVSS 5.9) touchant k8s.io/ingress-nginx, ingress-nginx (kubernetes).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.89%, plus élevée que 59.5% des vulnérabilités.
- Correctif : mettre à jour vers 0.28.0 ou plus récent.
Description
The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password file of another ingress which uses nginx.ingress.kubernetes.io/auth-type: basic and which has a hyphenated namespace or secret name.
NVD description
The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password file of another ingress which uses nginx.ingress.kubernetes.io/auth-type: basic and which has a hyphenated namespace or secret name.
Autres vulnérabilités de k8s.io/ingress-nginx
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free