Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

The vulnerability of the Kubernetes cluster management software, related to the use of open redirection, allows a hacker to access confidential data and compromise its integrity.

🗓️ 14 Apr 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Open redirection in Kubernetes management enables attackers to access data and compromise integrity.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities
8 Jun 202321:56
–ibm
IBM Security Bulletins		Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2021-25737)
28 May 202116:54
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data
29 Jun 202217:05
–ibm
IBM Security Bulletins		Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Kubernetes (CVE-2021-25737)
22 Apr 202213:12
–ibm
IBM Security Bulletins		Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2021-25737)
18 Nov 202109:39
–ibm
ArchLinux		[ASA-202106-29] kube-apiserver: insufficient validation
9 Jun 202100:00
–archlinux
Circl		CVE-2021-25737
15 Jul 202107:58
–circl
CNNVD		Kubernetes 输入验证错误漏洞
18 May 202100:00
–cnnvd
CVE		CVE-2021-25737
6 Sep 202111:32
–cve
Cvelist		CVE-2021-25737 Holes in EndpointSlice Validation Enable Host Network Hijack
6 Sep 202111:32
–cvelist
Rows per page
Vulners
Node
googlekubernetesRange1.19.0–1.19.10
OR
googlekubernetesMatch1.21.0
OR
googlekubernetesRange1.16.0–1.18.19
OR
googlekubernetesRange1.20.0–1.20.7
OR
red_hatred_hat_openshift_container_platformMatch4.8

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
27 Jun 2022 00:00Current
6Medium risk
Vulners AI Score6
CVSS 34.8
CVSS 24.9
EPSS0.01332
Open redirectionKubernetes managementremote attackersconfidential datadata integrity
3