EPSS
Percentile
72.0%
It was found that Kubernetes did not correctly validate X.509 client intermediate certificate host name fields. An attacker could use this flaw to bypass authentication requirements by using a specially crafted X.509 certificate.
bugzilla.redhat.com/show_bug.cgi?id=1384112