Privilege Escalation in Kubernetes

🗓️ 24 Apr 2024 20:01:22Reported by GitHub Advisory DatabaseType

Kubernetes privilege escalation risk from unvalidated redirect

Reporter	Title	Published	Views	Family All 239
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go and Kubernetes.	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go and Kubernetes.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: API Connect is vulnerable to denial of service via Kubernetes (CVE-2020-8557, CVE-2020-8559)	8 Oct 202001:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2020-8559)	22 Jul 202017:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Kubernetes affect IBM InfoSphere Information Server	1 Apr 202120:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	1 Sep 202514:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Kubernetes vulnerabilities (CVE-2020-8557, CVE-2020-8559)	28 Sep 202020:01	–	ibm
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2020-8559)	14 Jan 202113:24	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm

Vulners

Node

k8s.io kubernetesRange1.18.0–1.18.7go

k8s.io kubernetesRange1.17.0–1.17.9go

k8s.io kubernetesRange<1.16.13go

k8s.io apimachineryRange0.18.0–0.18.7go

k8s.io apimachineryRange0.17.0–0.17.9go

k8s.io apimachineryRange<0.16.13go

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8559
github	www.github.com/kubernetes/kubernetes/issues/92914
github	www.github.com/kubernetes/kubernetes/pull/92941
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/tdwyer/CVE-2020-8559
groups	www.groups.google.com/d/msg/kubernetes-security-announce/JAIGG5yNROs/19nHQ5wkBwAJ
groups	www.groups.google.com/g/kubernetes-security-announce/c/JAIGG5yNROs
security	www.security.netapp.com/advisory/ntap-20200810-0004
github	www.github.com/advisories/GHSA-33c5-9fx5-fvjm

07 May 2024 13:08Current

7.2High risk

Vulners AI Score7.2

CVSS 26

CVSS 3.16.4 - 6.8

EPSS0.061

CWE-601