CVE-2021-25740

🗓️ 20 Sep 2021 17:05:18Reported by kubernetesType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 83 Views

Security issue in Kubernetes enables users to send unauthorized network traffic

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by an endpoint resource security design flaw in Kubernetes (CVE-2021-25740)	8 Jun 202222:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by an information disclosure vulnerability in Kubernetes (CVE-2021-25740)	3 Jan 202315:48	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.10 addresses multiple security vulnerabilities.	27 Sep 202321:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to information disclosure in Kubernetes [CVE-2021-25740]	25 Apr 202418:34	–	ibm
Circl	CVE-2021-25740	15 Jul 202107:58	–	circl
CNNVD	Red Hat OpenShift Container Platform 安全漏洞	15 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-25740 Holes in EndpointSlice Validation Enable Host Network Hijack	20 Sep 202117:05	–	cvelist
Debian CVE	CVE-2021-25740	20 Sep 202117:05	–	debiancve
EUVD	EUVD-2021-2120	7 Oct 202500:30	–	euvd
Github Security Blog	Confused Deputy in Kubernetes	21 Sep 202118:28	–	github

NVD

Node

kubernetes kubernetesMatch-

[
  {
    "product": "Kubernetes",
    "vendor": "Kubernetes",
    "versions": [
      {
        "lessThan": "*",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
groups	www.groups.google.com/g/kubernetes-security-announce/c/WYE9ptrhSLE
kubernetes	www.kubernetes.io/blog/2026/05/26/reconciling-unfixed-kubernetes-cves/
github	www.github.com/kubernetes/kubernetes/issues/103675
security	www.security.netapp.com/advisory/ntap-20211014-0001/

01 Jun 2026 23:16Current

3.4Low risk

Vulners AI Score3.4

CVSS 3.13.1

CVSS 23.5

EPSS0.00519