Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vw47-mr44-3jf9

Опубликовано: 21 сент. 2021
Источник: github
Github: Прошло ревью
CVSS3: 3.1

Описание

Confused Deputy in Kubernetes

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

Пакеты

Наименование

k8s.io/kubernetes

go
Затронутые версииВерсия исправления

<= 1.22.2

Отсутствует

EPSS

Процентиль: 67%
0.0055
Низкий

3.1 Low

CVSS3

Дефекты

CWE-441
CWE-610

Связанные уязвимости

CVSS3: 3.1
ubuntu
около 4 лет назад

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

CVSS3: 3.1
redhat
больше 4 лет назад

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

CVSS3: 3.1
nvd
около 4 лет назад

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

CVSS3: 3.1
debian
около 4 лет назад

A security issue was discovered with Kubernetes that could enable user ...

CVSS3: 3.1
fstec
больше 4 лет назад

Уязвимость корпоративной платформы Red Hat OpenShift Container Platform, связанная с ошибками проведения процедуры авторизации, позволяющая нарушителю получить доступ к защищаемой информации

EPSS

Процентиль: 67%
0.0055
Низкий

3.1 Low

CVSS3

Дефекты

CWE-441
CWE-610