Описание
This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.
A flaw was found in Kubernetes Windows nodes. This vulnerability allows a user with the ability to query a node's '/logs' endpoint to execute arbitrary commands on the host.
Отчет
This CVE affects only Windows worker nodes. To detect whether this vulnerability has been exploited, you can examine your cluster's audit logs to search for node 'logs' queries with suspicious inputs.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Container Platform 4 | openshift | Fix deferred | ||
| OpenShift Windows Machine Config Operator 10.16 | registry.redhat.io/openshift4-wincw/windows-machine-config-rhel9-operator | Fixed | RHSA-2025:9136 | 16.06.2025 |
| OpenShift Windows Machine Config Operator 10.17 | registry.redhat.io/openshift4-wincw/windows-machine-config-rhel9-operator | Fixed | RHSA-2025:8704 | 09.06.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
5.9 Medium
CVSS3
Связанные уязвимости
This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.
This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.
This CVE affects only Windows worker nodes. Your worker node is vulner ...
Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API
Уязвимость утилиты kubelet программного средства управления кластерами виртуальных машин Kubernetes для операционных систем Windows, позволяющая нарушителю выполнить произвольные команды
EPSS
5.9 Medium
CVSS3