Em resumo
- CVE-2020-8561 é uma vulnerabilidade MÉDIO (CVSS 4.1) que afeta k8s.io/kubernetes, kubernetes (kubernetes).
- Chance de exploração nos próximos 30 dias (EPSS): 2.1%, maior que 81.7% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs when the log level is set to 10, they can view the redirected responses and headers in the logs.
NVD description
A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs when the log level is set to 10, they can view the redirected responses and headers in the logs.
Mais vulnerabilidades de k8s.io/kubernetes
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free