Improper Authentication

The Kubelet and kube-proxy components were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to running on the node or in the node's network namespace. Such a service is generally thought to be reachable only by other processes on the same host, but...

Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes kubelet and kube-proxy security vulnerability (CVE-2020-8558)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability in the Kubernetes kubelet and kube-proxy that could allow neighboring nodes to bypass localhost boundary CVE-2020-8558 Vulnerability Details CVEID: CVE-2020-8558 Description: Kubernetes kube-proxy could allow a remote...

Node setting allows for neighboring hosts to bypass localhost boundary

CVSS Rating: In typical clusters: medium 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N In clusters where API server insecure port has not been disabled: high 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H A security issue was discovered in kube-proxy which allows adjacent hosts to reach TCP...

CVE-2020-8558

The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 running on the node or in the node's network namespace. Such a service is generally...

Kubernetes: Man in the middle using LoadBalancer or ExternalIPs services

I rated this vulnerability as high because trying to rate it with CVSS v3.0 Calculator gives me 9.9 which seems way too high as you do require to be able to create services in the K8S cluster. Summary: This report details 2 ways to man in the middle traffic by: a creating a LoadBalancer service a...