Node setting allows for neighboring hosts to bypass localhost boundary

🗓️ 19 Jun 2020 18:38:58Reported by Kubernetes Security Response CommitteeType

Kube proxy flaw lets adjacent hosts reach localhost services; insecure API port may allow access.

Reporter	Title	Published	Views	Family All 70
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes kubelet and kube-proxy security vulnerability (CVE-2020-8558)	25 Aug 202008:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes kubelet and kube-proxy security vulnerability (CVE-2020-8558)	16 Jul 202017:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Kubernetes affect IBM InfoSphere Information Server	1 Apr 202120:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	1 Sep 202514:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Kubernetes vulnerabilities	26 Feb 202114:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Python, Docker, and ICP affect IBM Spectrum Discover	13 May 202116:56	–	ibm
GithubExploit	Exploit for Unprotected Alternate Channel in Kubernetes	9 Jul 202006:56	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Docker	14 Feb 202604:10	–	githubexploit
Gitee	Exploit for OS Command Injection in Docker	27 Jul 202503:40	–	gitee

19 Jun 2020 18:38Current

6.9Medium risk

Vulners AI Score6.9

CVSS 25.8

CVSS 3.15.4 - 8.8

EPSS0.03597