The vulnerability of the kube-apiserver component, a software component for managing clusters of virtual machines in Kubernetes, allows a attacker to increase their privileges.

🗓️ 07 Aug 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Kube-apiserver vulnerability enables remote privilege escalation by redirecting update requests to arbitrary resources.

Reporter	Title	Published	Views	Family All 239
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go and Kubernetes.	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go and Kubernetes.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: API Connect is vulnerable to denial of service via Kubernetes (CVE-2020-8557, CVE-2020-8559)	8 Oct 202001:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2020-8559)	22 Jul 202017:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Kubernetes affect IBM InfoSphere Information Server	1 Apr 202120:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	1 Sep 202514:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Kubernetes vulnerabilities (CVE-2020-8557, CVE-2020-8559)	28 Sep 202020:01	–	ibm
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2020-8559)	14 Jan 202113:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm

Vulners

Node

red_hat openshift_container_platformMatch3.11

OR

red_hat openshift_container_platformMatch4.4

OR

red_hat openshift_container_platformMatch4.5

OR

red_hat openshift_container_platformMatch4.6

OR

kubernetes_authors kubernetes-csi-proxyRange1.16.0–1.16.12

OR

kubernetes_authors kubernetes-csi-proxyRange1.17.0–1.17.8

OR

kubernetes_authors kubernetes-csi-proxyRange1.18.0–1.18.5

OR

kubernetes_authors kubernetes-csi-proxyRange1.6.0–1.15.0

Source	Link
github	www.github.com/kubernetes/kubernetes/issues/92914
groups	www.groups.google.com/d/msg/kubernetes-security-announce/JAIGG5yNROs/19nHQ5wkBwAJ
redos	www.redos.red-soft.ru/support/secure/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-8559
access	www.access.redhat.com/security/cve/CVE-2020-8559
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6/
web	www.web.nvd.nist.gov/view/vuln/detail

26 Aug 2024 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 36.8

CVSS 28.3

EPSS0.061

kube apiserver kubernetes privilege escalation remote exploit update redirection arbitrary resources