Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vw47-mr44-3jf9

Опубликовано: 21 сент. 2021
Источник: github
Github: Прошло ревью
CVSS3: 3.1

Описание

Confused Deputy in Kubernetes

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

Пакеты

Наименование

k8s.io/kubernetes

go
Затронутые версииВерсия исправления

<= 1.22.2

Отсутствует

EPSS

Процентиль: 66%
0.00535
Низкий

3.1 Low

CVSS3

Дефекты

CWE-441
CWE-610

Связанные уязвимости

CVSS3: 3.1
ubuntu
больше 3 лет назад

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

CVSS3: 3.1
redhat
почти 4 года назад

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

CVSS3: 3.1
nvd
больше 3 лет назад

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

CVSS3: 3.1
debian
больше 3 лет назад

A security issue was discovered with Kubernetes that could enable user ...

CVSS3: 3.1
fstec
почти 4 года назад

Уязвимость корпоративной платформы Red Hat OpenShift Container Platform, связанная с ошибками проведения процедуры авторизации, позволяющая нарушителю получить доступ к защищаемой информации

EPSS

Процентиль: 66%
0.00535
Низкий

3.1 Low

CVSS3

Дефекты

CWE-441
CWE-610