CVE-2021-25740

Опубликовано: 20 сент. 2021

Источник: nvd

CVSS3: 3.1

CVSS2: 3.5

EPSS Низкий

Описание

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

Ссылки

https://github.com/kubernetes/kubernetes/issues/103675
Mitigation
Third Party Advisory
https://groups.google.com/g/kubernetes-security-announce/c/WYE9ptrhSLE
Mailing List
Mitigation
Third Party Advisory
https://kubernetes.io/blog/2026/05/26/reconciling-unfixed-kubernetes-cves/
https://security.netapp.com/advisory/ntap-20211014-0001/
Third Party Advisory
https://github.com/kubernetes/kubernetes/issues/103675
Mitigation
Third Party Advisory
https://groups.google.com/g/kubernetes-security-announce/c/WYE9ptrhSLE
Mailing List
Mitigation
Third Party Advisory
https://security.netapp.com/advisory/ntap-20211014-0001/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:kubernetes:kubernetes:-:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01952

Низкий

3.1 Low

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-441

CWE-610

Связанные уязвимости

CVE-2021-25740

CVSS3: 3.1

ubuntu

почти 5 лет назад

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

CVE-2021-25740

CVSS3: 3.1

redhat

около 5 лет назад

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

CVE-2021-25740

msrc

около 2 месяцев назад

Holes in EndpointSlice Validation Enable Host Network Hijack

CVE-2021-25740

CVSS3: 3.1

debian

почти 5 лет назад

A security issue was discovered with Kubernetes that could enable user ...

GHSA-vw47-mr44-3jf9

CVSS3: 3.1

github

почти 5 лет назад

Confused Deputy in Kubernetes

EPSS

Процентиль: 78%

0.01952

Низкий

3.1 Low

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-441

CWE-610