CVE-2020-10749

🗓️ 03 Jun 2020 13:45:39Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 442 Views

A vulnerability in containernetworking/plugins before version 0.8.6 allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks

Reporter	Title	Published	Views	Family All 88
AlpineLinux	CVE-2020-10749	3 Jun 202013:45	–	alpinelinux
AlmaLinux	Moderate: container-tools:rhel8 security, bug fix, and enhancement update	3 Nov 202012:27	–	almalinux
IBM Security Bulletins	Security Bulletin: A vulnerability was found in all versions of container networking/plugins before version 0.8.6 of pipeline-utils affecting IBM Cloud Pak for Applications	30 Jul 202105:04	–	ibm
GithubExploit	Exploit for Channel Accessible by Non-Endpoint in Linuxfoundation Cni_Network_Plugins	11 Jun 202015:42	–	githubexploit
Tenable Nessus	CentOS 8 : container-tools:rhel8 (CESA-2020:4694)	1 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : containernetworking-plugins (RHSA-2020:2684)	9 Oct 202400:00	–	nessus
Tenable Nessus	Fedora 32 : golang-github-containernetworking-plugins (2021-ccb8a9c403)	11 Jan 202100:00	–	nessus
Tenable Nessus	MiracleLinux 7 : containernetworking-plugins-0.8.3-3.el7 (AXSA:2020-186:02)	20 Jan 202600:00	–	nessus
Tenable Nessus	openSUSE Security Update : cni-plugins (openSUSE-2020-1049)	27 Jul 202000:00	–	nessus
Tenable Nessus	openSUSE Security Update : cni-plugins (openSUSE-2020-1050)	27 Jul 202000:00	–	nessus

NVD

Vulners

Node

linuxfoundation cni_network_pluginsRange<0.8.6

Node

redhat openshift_container_platformMatch4.0

fedoraproject fedoraMatch32

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

[
  {
    "product": "containernetworking/plugins",
    "vendor": "Red Hat",
    "versions": [
      {
        "status": "affected",
        "version": "all containernetworking/plugins versions before version 0.8.6"
      }
    ]
  }
]

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00063.html
groups	www.groups.google.com/forum/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00065.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DV3HCDZYUTPPVDUMTZXDKK6IUO3JMGJC/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

21 Nov 2024 04:55Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16

CVSS 26

EPSS0.01843

CWE-300