| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/containernetworking/plugins | < 0.8.6 | 0.8.6 |
| cni network plugins | < 0.8.6 | 0.8.6 |
| openshift container platform | = 4.0 |
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free