10476 matches found
RHEL 7 / 8 : OpenShift Container Platform 4.7.7 (RHSA-2021:1150)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1150 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...
Rapid7 Announces Kubernetes Integration General Availability in InsightVM
Rapid7 is excited to announce the general availability of our Kubernetes integration in InsightVM, our vulnerability management tool.This represents a step forward in Rapid7’s ability to provide vulnerability and remediation management capabilities for container environments. Kubernetes is the mo...
Kubernetes: Loading YAML in Java client can lead to command execution
The io.kubernetes.client.util.Yaml file in the Kubernetes client library for Java uses a popular library SnakeYAML to serialize and deserialize YAML. The library has a feature which makes it possible to initiate instances of Java classes by using a YAML tag like !!some.Class "argument1" . More in...
KLA12152 ACE vulnerability in Microsoft Developer Tools
A remote code execution vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-28448 Related products Microsoft-Visual-Studio CVE list CVE-2021-28448 high KB list Solution Install necessary updat...
Security Bug Allows Attackers to Brick Kubernetes Clusters
A vulnerability in one of the Go libraries that Kubernetes is based on could lead to denial of service DoS for the CRI-O and Podman container engines. The bug CVE-2021-20291 affects the Go library called “containers/storage.” According to Aviv Sasson, the security researcher at Palo Alto’s Unit 4...
GO-2021-0066 Sensitive information leak via log file in k8s.io/kubernetes
Attempting to read a malformed .dockercfg may cause secrets to be inappropriately logged...
GO-2021-0065 Unauthorized credential disclosure in k8s.io/kubernetes and k8s.io/client-go
Authorization tokens may be inappropriately logged if the verbosity level is set to a debug level...
GO-2021-0064 Unauthorized credential disclosure via debug logs in k8s.io/kubernetes and k8s.io/client-go
Authorization tokens may be inappropriately logged if the verbosity level is set to a debug level. This is due to an incomplete fix for CVE-2019-11250...
CVE-2021-3499
A vulnerability was found in OVN Kubernetes where the Egress Firewall does not reliably apply firewall rules when there is multiple dns rules. It could lead to potentially lose of confidentiality, integrity or availability of a service...
CVE-2021-25735
A vulnerability was found in Kubernetes' kube-apiserver that could allow Node updates to bypass a Validating Admission Webhook. An authenticated user could exploit this by modifying Node properties to values that should have been prevented by registered admission webhooks...
CVE-2021-25735
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the No...
Kubernetes SIGs kube-apiserver 安全漏洞
Kubernetes SIGs kube-apiserver is a Kubernetes SIGs open source application. Validate and configure data for api objects, which include containers, services, replication controllers, and more. A security vulnerability exists in Kubernetes SIGs kube-apiserver that allows node updates to bypass a...
OVN Kubernetes 安全漏洞
Kubernetes K8s is an open source system from the Cloud Native Computing Foundation for automating the deployment, scaling, and management of containerized applications. A security vulnerability exists in OVN Kubernetes version 0.3.0 and prior versions, which stems from an egress firewall's...
Low: Red Hat Security Advisory: OpenShift Container Platform 4.5.37 security update
Red Hat OpenShift Container Platform release 4.5.37 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which give...
CVE-2021-28448
Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability...
CVE-2021-28448
Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability...
Remote code execution
Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability...
CVE-2021-28448
Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability...
CVE-2021-28448
CVE-2021-28448 affects the Visual Studio Code Kubernetes Tools extension. The vulnerability enables remote code execution when a user opens crafted content, as reported by multiple sources (e.g., Kaspersky advisories, NVD/MSRC data). The primary affected component is the Kubernetes Tools extensio...
