CVE-2020-8559

🗓️ 22 Jul 2020 13:47:08Reported by kubernetesType

cve🔗 web.nvd.nist.gov👁 549 Views🌐 WEB

Kubernetes kube-apiserver unvalidated redirect vulnerability in versions v1.6-v1.1

Reporter	Title	Published	Views	Family All 687
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go and Kubernetes.	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go and Kubernetes.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: API Connect is vulnerable to denial of service via Kubernetes (CVE-2020-8557, CVE-2020-8559)	8 Oct 202001:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2020-8559)	22 Jul 202017:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Kubernetes affect IBM InfoSphere Information Server	1 Apr 202120:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	1 Sep 202514:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Kubernetes vulnerabilities (CVE-2020-8557, CVE-2020-8559)	28 Sep 202020:01	–	ibm
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2020-8559)	14 Jan 202113:24	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm

NVD

Node

kubernetes kubernetesRange1.6.0–1.15.0

kubernetes kubernetesRange1.16.0–1.16.13

kubernetes kubernetesRange1.17.0–1.17.9

kubernetes kubernetesRange1.18.0–1.18.6

[
  {
    "product": "Kubernetes",
    "vendor": "Kubernetes",
    "versions": [
      {
        "status": "affected",
        "version": "1.6"
      },
      {
        "status": "affected",
        "version": "1.7"
      },
      {
        "status": "affected",
        "version": "1.8"
      },
      {
        "status": "affected",
        "version": "1.9"
      },
      {
        "status": "affected",
        "version": "1.10"
      },
      {
        "status": "affected",
        "version": "1.11"
      },
      {
        "status": "affected",
        "version": "1.12"
      },
      {
        "status": "affected",
        "version": "1.13"
      },
      {
        "status": "affected",
        "version": "1.14"
      },
      {
        "status": "affected",
        "version": "1.15"
      },
      {
        "lessThanOrEqual": "1.16.12",
        "status": "affected",
        "version": "1.16",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "1.17.8",
        "status": "affected",
        "version": "1.17",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "1.18.5",
        "status": "affected",
        "version": "1.18",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20200810-0004/
groups	www.groups.google.com/d/msg/kubernetes-security-announce/JAIGG5yNROs/19nHQ5wkBwAJ
github	www.github.com/kubernetes/kubernetes/issues/92914

Parameter	Position	Path	Description	CWE
command	path	/exec	Unvalidated redirect vulnerability: requests to /exec cause a 302 redirect to a pod/exec URL including command and container parameters, enabling cross-node command execution via the redirected path.	CWE-601
container	path	/exec	Unvalidated redirect vulnerability: requests to /exec cause a 302 redirect to a pod/exec URL including command and container parameters, enabling cross-node command execution via the redirected path.	CWE-601
stderr	path	/exec	Unvalidated redirect vulnerability: requests to /exec cause a 302 redirect to a pod/exec URL including command and container parameters, enabling cross-node command execution via the redirected path.	CWE-601
stdout	path	/exec	Unvalidated redirect vulnerability: requests to /exec cause a 302 redirect to a pod/exec URL including command and container parameters, enabling cross-node command execution via the redirected path.	CWE-601
command	path	/attach	Unvalidated redirect vulnerability: requests to /attach cause a 302 redirect to a pod/exec URL including command and container parameters, enabling cross-node command execution via the redirected path.	CWE-601
container	path	/attach	Unvalidated redirect vulnerability: requests to /attach cause a 302 redirect to a pod/exec URL including command and container parameters, enabling cross-node command execution via the redirected path.	CWE-601
stderr	path	/attach	Unvalidated redirect vulnerability: requests to /attach cause a 302 redirect to a pod/exec URL including command and container parameters, enabling cross-node command execution via the redirected path.	CWE-601
stdout	path	/attach	Unvalidated redirect vulnerability: requests to /attach cause a 302 redirect to a pod/exec URL including command and container parameters, enabling cross-node command execution via the redirected path.	CWE-601
command	path	/portforward	Unvalidated redirect vulnerability: requests to /portforward cause a 302 redirect to a pod/exec URL including command and container parameters, enabling cross-node command execution via the redirected path.	CWE-601
container	path	/portforward	Unvalidated redirect vulnerability: requests to /portforward cause a 302 redirect to a pod/exec URL including command and container parameters, enabling cross-node command execution via the redirected path.	CWE-601

17 Jun 2026 03:26Current

6.6Medium risk

Vulners AI Score6.6

CVSS 26

CVSS 3.16.4 - 6.8

EPSS0.061

CWE-601