Authentication Bypass

2018-10-1000:40:21

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

73.7%

JSON

github.com/gardener/gardener is vulnerable to authentication bypass attacks. The vulnerability exists due to the combined issues with kube-apiserver, and a missing cleanup to isolate network resources, and potentially allows exploitation in the Gardener context.

CPENameOperatorVersion
github.com/gardener/gardenereqHEAD
github.com/gardener/gardenerle0.12.1

CPE	Name	Operator	Version
	github.com/gardener/gardener	eq	HEAD
	github.com/gardener/gardener	le	0.12.1

References

www.securityfocus.com/bid/105579

github.com/gardener/gardener/commit/b8d785030951377f016873626aa206789fe24498

groups.google.com/forum/#!topic/gardener/OjfKEe1LwXo

launchpad.support.sap.com/#/notes/2699726

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095

0.004 Low

EPSS

Percentile

73.7%

JSON

Related for VERACODE:7584