Em resumo
- CVE-2020-8553 é uma vulnerabilidade MÉDIO (CVSS 5.9) que afeta k8s.io/ingress-nginx, ingress-nginx (kubernetes).
- Chance de exploração nos próximos 30 dias (EPSS): 0.89%, maior que 59.5% das vulnerabilidades.
- Correção: atualize para 0.28.0 ou posterior.
Description
The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password file of another ingress which uses nginx.ingress.kubernetes.io/auth-type: basic and which has a hyphenated namespace or secret name.
NVD description
The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password file of another ingress which uses nginx.ingress.kubernetes.io/auth-type: basic and which has a hyphenated namespace or secret name.
Mais vulnerabilidades de k8s.io/ingress-nginx
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free