Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes

Potential proxy IP restriction bypass in Kubernetes

kube-apiserver vulnerable to policy bypass

Kubernetes privilege escalation vulnerability

Kubernetes arbitrary file overwrite

Incomplete List of Disallowed Inputs in Kubernetes

Authorization bypass in Openshift

Kubernetes vulnerable to validation bypass

Kubernetes Improper Input Validation vulnerability

Access Restriction Bypass in kube-apiserver

Missing authorization in Jenkins Kubernetes Plugin

Exposure of Sensitive Information in Jenkins Kubernetes Plugin

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins Kubernetes Plugin

kubectl ANSI escape characters not filtered

Files or Directories Accessible to External Parties in kubernetes

Kubernetes mountable secrets policy bypass

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10 are affected. The issue is of medium severity, but not exposed by the default configuration.

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user?s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user?s machine when kubectl cp is called, limited only by the system permissions of the local user. Kubernetes affected versions include versions prior to 1.12.9, versions prior to 1.13.6, versions prior to 1.14.2, and versions 1.1, 1.2, 1.4, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11.

Kubernetes Sensitive Information leak via Log File

Kubernetes client-go vulnerable to Sensitive Information Leak via Log File