CVE-2021-25735 Validating Admission Webhook does not observe some previous fields

🗓️ 06 Sep 2021 11:32:00Reported by kubernetesType

Security issue in kube-apiserver allowing node updates to bypass Validating Admission Webhoo

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Kubernetes kube-apiserver may affect IBM Robotic Process Automation for Cloud Pak and result in a bypass of security restrictions (CVE-2021-25735).	20 Jun 202314:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2021-25735)	7 May 202110:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Kubernetes.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2021-25735)	4 Feb 202217:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Kubernetes.	14 Feb 202321:14	–	ibm
GithubExploit	Exploit for Incomplete Internal State Distinction in Kubernetes	22 Apr 202107:25	–	githubexploit
AlpineLinux	CVE-2021-25735	6 Sep 202111:32	–	alpinelinux

[
  {
    "product": "Kubernetes",
    "vendor": "Kubernetes",
    "versions": [
      {
        "lessThanOrEqual": "1.18.17",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "1.19.9",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "1.20.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/kubernetes/kubernetes/issues/100096
groups	www.groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y

06 Sep 2021 11:32Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.5

EPSS0.05226

CWE-372