Описание
A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of ..svc.
Меры по смягчению последствий
Consider adding the svc namespace to the DNS operator to prevent a low-privileged user from creating it. Alternatively, add a default admission controller to prevent this namespace from being created by a non-privileged user.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Container Platform 4 | openshift4/ose-coredns-rhel9 | Not affected |
Показывать по
Дополнительная информация
Статус:
4.4 Medium
CVSS3
Связанные уязвимости
A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of <service>.<namespace>.svc.
A flaw was found in coreDNS. This flaw allows a malicious user to rero ...
coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints
4.4 Medium
CVSS3