Incorrect Authorization

🗓️ 21 Jan 2021 00:00:00Reported by https://gitlab.com/gitlab-org/security-products/gemnasium-dbType

Kubernetes API server allows attacker to intercept traffic by creating a ClusterIP service and setting externalIPs field, as well as patching the status of a LoadBalancer service to manipulate traffic

Reporter	Title	Published	Views	Family All 92
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	15 Apr 202502:54	–	ibm
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes security vulnerability (CVE-2020-8554)	11 Mar 202110:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Kubernetes vulnerabilities (CVE-2020-8554)	2 Sep 202121:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes security vulnerability (CVE-2020-8554)	11 Jun 202115:44	–	ibm
AlpineLinux	CVE-2020-8554	21 Jan 202117:09	–	alpinelinux
Gitee	Exploit for OS Command Injection in Docker	27 Jul 202503:40	–	gitee
Gitee	Exploit for OS Command Injection in Docker	12 Nov 202116:15	–	gitee
CBLMariner	CVE-2020-8554 affecting package python-kubernetes for versions less than 21.7.0-1	5 Feb 202522:12	–	cbl_mariner
CBLMariner	CVE-2020-8554 affecting package kubernetes for versions less than 1.28.3-1	8 Nov 202302:07	–	cbl_mariner