Credentials Management

The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components such as kube-apiserver which make use of basic or bearer token authentication, and run at high verbosity...

CVE-2019-10223

A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that enabled annotations to be exposed as metrics. By default, the kube-state-metrics metrics only expose metadata about Secrets. However, a combination of...

CVE-2019-11250

The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components such as kube-apiserver prior to v1.16.0, which make use of basic or bearer token authentication, and run ...

KUBE NETWORK TECHNOLOGY CO., LTD. website building system suffers from SQL injection vulnerability.

KUBE NETWORK TECHNOLOGY CO., LTD. is a company that provides professional website building services to our clients. KUBE NETWORK TECHNOLOGY CO. Ltd. website builder system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the...

CVE-2019-3818

The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the...

CVE-2019-3818

The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the...

CVE-2019-3818

The CVE concerns kube-rbac-proxy (container) used in Red Hat OpenShift Container Platform. Affected: kube-rbac-proxy before version 0.4.1. Issue: TLS configurations are not honored, enabling insecure ciphers and TLS 1.0 usage. Impact: potential exposure of traffic to weak encryption; attacker cou...

Man-in-the-Middle (MitM)

kube-rbac-proxy is vulnerable to man-in-the-middle attack. Insecure ciphers and TLS 1.0 are used to establish an SSL connection between the client and server, which would allow a remote attacker to exploit TLS vulnerabilities and perform man-in-the-middle attacks to sniff traffic containing...

CVE-2019-3818

The kube-rbac-proxy container, as used in Red Hat OpenShift Container Platform, does not honor TLS configurations allowing for the use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the encryption of the...

proxy request handling in kube-apiserver can leave vulnerable TCP connections

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 9.8, critical With a specially crafted request, users that are authorized to establish a connection through the Kubernetes API server to a backend server can then send arbitrary requests over the same connection directly to that backend, authenticated...

Authentication Bypass

github.com/gardener/gardener is vulnerable to authentication bypass attacks. The vulnerability exists due to the combined issues with kube-apiserver, and a missing cleanup to isolate network resources, and potentially allows exploitation in the Gardener context...

Kube Jump - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Kube Jump published at the 'play' market has multiple vulnerabilities...