PT-2020-6970

🗓️ 13 Aug 2019 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 8 Views

Unvalidated redirect in proxied upgrade requests may enable escalation on kube apiserver.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go and Kubernetes.	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go and Kubernetes.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: API Connect is vulnerable to denial of service via Kubernetes (CVE-2020-8557, CVE-2020-8559)	8 Oct 202001:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2020-8559)	22 Jul 202017:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Kubernetes affect IBM InfoSphere Information Server	1 Apr 202120:53	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	24 Sep 202614:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.18.0 shipped with IBM Cloud Pak for Business Automation iFixes for June 2026	29 Jun 202610:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	1 Sep 202514:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Kubernetes vulnerabilities (CVE-2020-8557, CVE-2020-8559)	28 Sep 202020:01	–	ibm

Source	Link
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6
osv	www.osv.dev/vulnerability/CVE-2025-61730
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8559
osv	www.osv.dev/vulnerability/CVE-2026-25679
github	www.github.com/tabbysable/POC-2020-8559
osv	www.osv.dev/vulnerability/CVE-2026-27138
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RN37949.json
t	www.t.me/k8security/88
osv	www.osv.dev/vulnerability/CVE-2020-8565
osv	www.osv.dev/vulnerability/CVE-2025-61732

18 Sep 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 26 - 8.3

CVSS 3.16.4 - 8.6

EPSS0.061

SSVC

kubernetes apiserver proxied upgrades unvalidated redirect escalation risk six to fifteen