Lucene search
China National Vulnerability DatabaseCNVD-2022-55686HistoryJun 15, 2022 - 12:00 a.m.
Google kCTF Access Control Error Vulnerability
2022-06-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
16
google
kctf
kubernetes
ctf
access control
vulnerability
improper access control
cluster
attackers
compromise
ip source range
settings
cnvd
EPSS
0.001
Percentile
28.7%
Google kCTF is a Kubernetes-based CTF competition infrastructure from Google (Google). kCTF v1.6.0 prior to the release of Google kCTF has an access control error vulnerability, which stems from the existence of improper access control in the kctf cluster, which can be exploited by attackers to compromise the kctf ip source range settings.
Related
prion
prion
Design/Logic Flaw
2022-06-13 16:15:00
osv
osv
CVE-2022-31055
2022-06-13 16:15:08
nvd
nvd
CVE-2022-31055
2022-06-13 16:15:08
cvelist
cvelist
CVE-2022-31055 Improper Access Control in kctf
2022-06-13 15:40:10
cve
cve
CVE-2022-31055
2022-06-13 16:15:08