Half-Blind SSRF in kube-controller-manager

CVSS Rating: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N There exists a Server Side Request Forgery SSRF vulnerability in kube-controller-manager that allows certain authorized users to leak up to 500 bytes of arbitrary information from unprotected endpoints within the master's host network such...

PT-2020-9170

Name of the Vulnerable Software and Affected Versions Kubernetes kube-controller-manager versions v1.0 through v1.17 Description The issue concerns a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes. Recommendations For Kubernetes...