Kubernetes Cluster Management Open Redirection

Open redirection in Kubernetes management enables attackers to access data and compromise integrity.

Reporter	Title	Published	Views	Family All 48
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2021-25737)	28 May 202116:54	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Kubernetes (CVE-2021-25737)	22 Apr 202213:12	–	ibm
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2021-25737)	18 Nov 202109:39	–	ibm
attackerkb	CVE-2021-25737	18 May 202119:00	–	attackerkb
ArchLinux	[ASA-202106-29] kube-apiserver: insufficient validation	9 Jun 202100:00	–	archlinux
Circl	CVE-2021-25737	15 Jul 202107:58	–	circl
CNNVD	Kubernetes 输入验证错误漏洞	18 May 202100:00	–	cnnvd
CVE	CVE-2021-25737	6 Sep 202111:32	–	cve
Cvelist	CVE-2021-25737 Holes in EndpointSlice Validation Enable Host Network Hijack	6 Sep 202111:32	–	cvelist

Vulners

Node

google kubernetesRange1.19.0–1.19.10

google kubernetesRange1.16.0–1.18.19

google kubernetesRange1.20.0–1.20.7

Source	Link
github	www.github.com/kubernetes/kubernetes/issues/102106
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-25737
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-25737
openwall	www.openwall.com/lists/oss-security/2021/05/18/4
access	www.access.redhat.com/security/cve/CVE-2021-25737
security	www.security.netapp.com/advisory/ntap-20211004-0004/
web	www.web.nvd.nist.gov/view/vuln/detail

27 Jun 2022 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 34.8

CVSS 24.9

EPSS0.01326