Security issue in Kubernetes with MutatingWebhookConfiguration and ValidatingWebhookConfiguration requests allowing redirection of kube-apiserver requests to private networks of the apiserver. User with access to kube-apiserver logs at log level 10 can view redirected responses and headers
Reporter | Title | Published | Views | Family All 18 |
---|---|---|---|---|
![]() | Confused Deputy in Kubernetes | 21 Sep 202118:28 | – | osv |
![]() | CGA-C5Q7-57H2-RQ9C | 6 Jun 202412:25 | – | osv |
![]() | CVE-2020-8561 | 20 Sep 202117:15 | – | osv |
![]() | CGA-P6XX-PG8G-64F3 | 6 Jun 202412:28 | – | osv |
![]() | CGA-CF3Q-MXJ7-W272 | 6 Jun 202412:25 | – | osv |
![]() | CGA-3X92-7523-QRFF | 6 Jun 202412:22 | – | osv |
![]() | Externally Controlled Reference to a Resource in Another Sphere | 21 Sep 202100:00 | – | gitlab |
![]() | CVE-2020-8561 | 20 Sep 202117:15 | – | cve |
![]() | Information Disclosure And Malicious Redirect | 21 Sep 202107:22 | – | veracode |
![]() | CVE-2020-8561 | 20 Sep 202100:00 | – | ubuntucve |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo