Access Restriction Bypass in kubernetes

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2016-1905 · ADVISORY
• kubernetes/kubernetes · WEB
• kubernetes/kubernetes commit 9e69123 · WEB
• access.redhat.com/errata/RHSA-2016:0070 · WEB
• access.redhat.com/errata/RHSA-2016:0351 · WEB
• access.redhat.com/security/cve/CVE-2016-1905 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• GitHub Advisory GHSA-xx8c-m748-xr4j · ADVISORY

github.com/kubernetes/kubernetes のその他の脆弱性

• CVE-2022-3294高 8.8Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modif…
• CVE-2022-3162中 6.5Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the s…
• CVE-2020-8566中 5.5In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to l…
• CVE-2020-8564中 5.5In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the doc…
• CVE-2020-8563中 5.5In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked i…