Endpoint & EndpointSlice permissions allow cross-Namespace forwarding

🗓️ 14 Jul 2021 03:30:07Reported by Kubernetes Security Response CommitteeType

Kubernetes Endpoints and EndpointSlices may expose backend IPs across namespaces; restrict access.

Reporter	Title	Published	Views	Family All 48
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by an endpoint resource security design flaw in Kubernetes (CVE-2021-25740)	8 Jun 202222:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by an information disclosure vulnerability in Kubernetes (CVE-2021-25740)	3 Jan 202315:48	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.10 addresses multiple security vulnerabilities.	27 Sep 202321:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to information disclosure in Kubernetes [CVE-2021-25740]	25 Apr 202418:34	–	ibm
BDU FSTEC	The vulnerability of the Red Hat OpenShift Container Platform corporate platform, related to errors in authentication procedures, allows a perpetrator to gain access to protected information.	10 Aug 202100:00	–	bdu_fstec
Circl	CVE-2021-25740	15 Jul 202107:58	–	circl
CNNVD	Red Hat OpenShift Container Platform 安全漏洞	15 Jul 202100:00	–	cnnvd
CVE	CVE-2021-25740	20 Sep 202117:05	–	cve
Cvelist	CVE-2021-25740 Holes in EndpointSlice Validation Enable Host Network Hijack	20 Sep 202117:05	–	cvelist
Debian CVE	CVE-2021-25740	20 Sep 202117:05	–	debiancve