Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-10749
HistoryJun 03, 2020 - 2:15 p.m.

CVE-2020-10749

2020-06-0314:15:12
CWE-300
[email protected]
web.nvd.nist.gov
7

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

CVSS3

6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

AI Score

6

Confidence

High

EPSS

0.001

Percentile

40.1%

JSON

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Affected configurations

Nvd
Node
linuxfoundationcni_network_pluginsRange<0.8.6
Node
redhatopenshift_container_platformMatch4.0
OR
fedoraprojectfedoraMatch32
OR
redhatenterprise_linuxMatch7.0
OR
redhatenterprise_linuxMatch8.0
VendorProductVersionCPE
linuxfoundationcni_network_plugins*cpe:2.3:a:linuxfoundation:cni_network_plugins:*:*:*:*:*:*:*:*
redhatopenshift_container_platform4.0cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
fedoraprojectfedora32cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
redhatenterprise_linux7.0cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
redhatenterprise_linux8.0cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

Related

nessus 17
cve 1
osv 7
redhatcve 1
prion 1
f5 1
redhat 8
githubexploit 1
veracode 1
fedora 1
github 1
openvas 5
cvelist 1
ibm 1
suse 2
alpinelinux 1
ubuntucve 1
debiancve 1
oraclelinux 4
rocky 1
almalinux 1
nessus
nessus
RHEL 7 / 8 : OpenShift Container Platform 4.3.25 containernetworking-plugins (RHSA-2020:2443)
2020-06-17 00:00:00
RHEL 7 : containernetworking-plugins (RHSA-2020:2684)
2020-06-23 00:00:00
RHEL 7 / 8 : OpenShift Container Platform 4.2.36 containernetworking-plugins (RHSA-2020:2592)
2020-07-01 00:00:00
cve
cve
CVE-2020-10749
2020-06-03 14:15:12
osv
osv
containernetworking/plugins vulnerable to MitM attacks
2022-05-24 17:19:02
cni-plugins-0.9.1-1.3 on GA media
2024-06-15 00:00:00
CVE-2020-10749
2020-06-03 14:15:12
redhatcve
redhatcve
CVE-2020-10749
2022-05-14 11:41:21
prion
prion
Design/Logic Flaw
2020-06-03 14:15:00
f5
f5
K000134802 : Kubernetes vulnerability CVE-2020-10749
2023-05-25 00:00:00
redhat
redhat
(RHSA-2020:2684) Moderate: containernetworking-plugins security update
2020-06-23 14:01:08
(RHSA-2020:2403) Moderate: OpenShift Container Platform 4.4.8 containernetworking-plugins security update
2020-06-17 20:40:39
(RHSA-2020:2592) Moderate: OpenShift Container Platform 4.2.36 containernetworking-plugins security update
2020-07-01 15:51:03
githubexploit
githubexploit
Exploit for CVE-2020-10749
2020-06-11 15:42:18
veracode
veracode
Man-in-the-middle (MitM)
2020-06-04 01:17:56
fedora
fedora
[SECURITY] Fedora 32 Update: golang-github-containernetworking-plugins-0.9.0-1.fc32
2021-01-10 01:38:50
github
github
containernetworking/plugins vulnerable to MitM attacks
2022-05-24 17:19:02
openvas
openvas
openSUSE: Security Advisory for cni-plugins (openSUSE-SU-2020:1049-1)
2020-07-24 00:00:00
openSUSE: Security Advisory for cni-plugins (openSUSE-SU-2020:1050-1)
2020-07-24 00:00:00
Fedora: Security Advisory for golang-github-containernetworking-plugins (FEDORA-2021-ccb8a9c403)
2021-01-11 00:00:00
cvelist
cvelist
CVE-2020-10749
2020-06-03 13:45:39
ibm
ibm
Security Bulletin: A vulnerability was found in all versions of container networking/plugins before version 0.8.6 of pipeline-utils affecting IBM Cloud Pak for Applications
2021-07-30 05:04:20
suse
suse
Security update for cni-plugins (moderate)
2020-07-23 00:00:00
Security update for cni-plugins (moderate)
2020-07-23 00:00:00
alpinelinux
alpinelinux
CVE-2020-10749
2020-06-03 14:15:12
ubuntucve
ubuntucve
CVE-2020-10749
2020-06-03 00:00:00
debiancve
debiancve
CVE-2020-10749
2020-06-03 14:15:12
oraclelinux
oraclelinux
kubernetes kubeadm-ha-setup kubernetes-cni kubernetes-cni-plugins security update
2020-06-12 00:00:00
kubernetes-cni-plugins kubernetes-cni kubernetes olcne security update
2020-06-12 00:00:00
container-tools:ol8 security, bug fix, and enhancement update
2020-11-10 00:00:00
rocky
rocky
container-tools:rhel8 security, bug fix, and enhancement update
2020-11-03 12:27:37
almalinux
almalinux
Moderate: container-tools:rhel8 security, bug fix, and enhancement update
2020-11-03 12:27:37

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

CVSS3

6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

AI Score

6

Confidence

High

EPSS

0.001

Percentile

40.1%

JSON
Related for NVD:CVE-2020-10749
nessus17cve1osv7redhatcve1prion1f51redhat8githubexploit1veracode1fedora1github1openvas5cvelist1ibm1suse2alpinelinux1ubuntucve1debiancve1oraclelinux4rocky1almalinux1