Skip to content

Latest commit

 

History

History
23 lines (12 loc) · 1.07 KB

VULN.md

File metadata and controls

23 lines (12 loc) · 1.07 KB

Vulnerabilities

Watch out for critical vulnerabilities on Kubernetes security announce forum

Security announces forum

Also, check out GitHub issues

Kubernetes specific

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port.

Affected: < 1.15.0, 1.14.4, 1.13.8, 1.12.10

With a specially crafted request, users that are authorized to establish a connection through the Kubernetes API server to a backend server can then send arbitrary requests over the same connection directly to that backend, authenticated with the Kubernetes API server’s TLS credentials used to establish the backend connection.

Affected: < 1.10.11, < 1.11.5, <1.12.3

PoCs: authenticated/unauthenticated