Security Bulletin: A vulnerability in Kubernetes kube-apiserver may affect IBM Robotic Process Automation for Cloud Pak and result in a bypass of security restrictions (CVE-2021-25735).

Summary Kubernetes kube-apiserver is used by IBM Robotic Process Automation for Cloud Pak as part of it's base container images. CVE-2021-25735 Vulnerability Details CVEID:CVE-2021-25735 DESCRIPTION: Kubernetes kube-apiserver could allow a remote authenticated attacker to bypass security...

SUSE CVE-2021-25735

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the No...

Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2021-25735)

Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability in the Kubernetes API server that could allow node updates to bypass a validating admission webhook CVE-2021-25735 Vulnerability Details CVEID: CVE-2021-25735 Description: Kubernetes kube-apiserver could allow a remote...

OESA-2021-1373 kubernetes security update

Container cluster management. Security Fixes: A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not...

CVE-2021-25735

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the No...

CVE-2021-25735

CVE-2021-25735 affects kube-apiserver and can allow node updates to bypass a Validating Admission Webhook for Nodes that deny admission based on the old state of the Node object. The Validating Admission Webhook may fail to observe some previous fields, enabling bypass when the webhook’s decision...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.8.2 packages and security update

Red Hat OpenShift Container Platform release 4.8.2 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.8. Red Hat Product Security has rated this update as having a security impact of...

Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2021-25735)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability in the Kubernetes API server that could allow node updates to bypass a validating admission webhook CVE-2021-25735 Vulnerability Details CVEID: CVE-2021-25735 Description: Kubernetes kube-apiserver could allow a remote...

Exploit for Incomplete Internal State Distinction in Kubernetes

CVE-2021-25735 Exploit CVE-2021-25735: Kubernetes Validatin...