Wind River Support Network

HomeDefectsLIN1018-8174
Not to be fixed

LIN1018-8174 : Security Advisory - kubernetes - CVE-2020-8561

Created: Sep 15, 2021    Updated: Nov 2, 2023
Resolved Date: Nov 2, 2023
Found In Version: 10.18.44.1
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Userspace

Description

A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs when the log level is set to 10, they can view the redirected responses and headers in the logs.

https://nvd.nist.gov/vuln/detail/CVE-2020-8561
Live chat
Online