SUSE CVE-2020-8553

🗓️ 15 Feb 2023 04:01:15Reported by Suse CVEType

CVE-2020-8553: Ingress NGINX before 0.28.0 lets a user overwrite another ingress password file via basic auth with a hyphenated namespace or secret.

Reporter	Title	Published	Views	Family All 22
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Kubernetes affect IBM InfoSphere Information Server	1 Apr 202120:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to a Kubernetes vulnerability (CVE-2020-8553)	28 Sep 202020:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Kubernetes vulnerabilities	26 Feb 202114:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Python, Docker, and ICP affect IBM Spectrum Discover	13 May 202116:56	–	ibm
BDU FSTEC	The vulnerability of the nginx.ingress.kubernetes.io/auth-type controller in the Kubernetes ingress-nginx cluster arises from improper external management of the file name. This allows attackers to access, create, modify, or delete data.	16 Dec 202100:00	–	bdu_fstec
CVE	CVE-2020-8553	29 Jul 202014:53	–	cve
Cvelist	CVE-2020-8553 Kubernetes ingress-nginx Compromise of auth via subset/superset namespace names	29 Jul 202014:53	–	cvelist
EUVD	EUVD-2022-4162	3 Oct 202520:07	–	euvd
Github Security Blog	ingress-nginx component for Kubernetes allows file overwrite	24 May 202217:24	–	github
Hacker One	Kubernetes: Compromise of auth via subset/superset namespace names.	21 Jan 202006:10	–	hackerone