CVE-2021-25735

🗓️ 06 Sep 2021 11:32:00Reported by kubernetesType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 137 Views

Security issue in kube-apiserver allowing node updates to bypass Validating Admission Webhook

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Kubernetes kube-apiserver may affect IBM Robotic Process Automation for Cloud Pak and result in a bypass of security restrictions (CVE-2021-25735).	20 Jun 202314:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2021-25735)	7 May 202110:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Kubernetes.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2021-25735)	4 Feb 202217:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Kubernetes.	14 Feb 202321:14	–	ibm
GithubExploit	Exploit for Incomplete Internal State Distinction in Kubernetes	22 Apr 202107:25	–	githubexploit
AlpineLinux	CVE-2021-25735	6 Sep 202111:32	–	alpinelinux

NVD

Node

kubernetes kubernetesRange<1.18.18

kubernetes kubernetesRange1.19.0–1.19.10

kubernetes kubernetesRange1.20.0–1.20.6

[
  {
    "product": "Kubernetes",
    "vendor": "Kubernetes",
    "versions": [
      {
        "lessThanOrEqual": "1.18.17",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "1.19.9",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "1.20.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/kubernetes/kubernetes/issues/100096
groups	www.groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y

21 Nov 2024 05:55Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25.5

CVSS 3.16.5

EPSS0.16302

CWE-372