Incorrect Authorization

🗓️ 06 Sep 2021 00:00:00Reported by https://gitlab.com/gitlab-org/security-products/gemnasium-dbType

gitlab

gitlab🔗 gitlab.com👁 27 Views

Security issue in kube-apiserver: node updates can bypass Validating Admission Webhoo

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Kubernetes kube-apiserver may affect IBM Robotic Process Automation for Cloud Pak and result in a bypass of security restrictions (CVE-2021-25735).	20 Jun 202314:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2021-25735)	7 May 202110:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Kubernetes.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2021-25735)	4 Feb 202217:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Kubernetes.	14 Feb 202321:14	–	ibm
GithubExploit	Exploit for Incomplete Internal State Distinction in Kubernetes	22 Apr 202107:25	–	githubexploit
AlpineLinux	CVE-2021-25735	6 Sep 202111:32	–	alpinelinux

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-25735

06 Sep 2021 00:00Current

3.9Low risk

Vulners AI Score3.9

CVSS 25.5

CVSS 3.16.5

EPSS0.16302

kube-apiserver security issue node updates validating admission webhook