Lucene search
Veracode Vulnerability DatabaseVERACODE:25627HistoryJun 08, 2020 - 4:06 a.m.
Server Side Request Forgery (SSRF)
2020-06-0804:06:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
23
EPSS
0.001
Percentile
41.5%
github.com/kubernetes/kubernetes is vulnerable to Server Side Request Forgery (SSRF). An attacker with a privilege to create a pod with certain built-in Volume types (GlusterFS, Quobyte, StorageFS, ScaleIO) or to create a StorageClass can cause an authenticated user to leak the resources from the endpoints without protection on the master’s host network.
References
www.openwall.com/lists/oss-security/2020/06/01/4
www.openwall.com/lists/oss-security/2021/05/04/8
github.com/kubernetes/kubernetes/issues/91542
groups.google.com/d/topic/kubernetes-security-announce/kEK27tqqs30/discussion
lists.fedoraproject.org/archives/list/[email protected]/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX/
security.netapp.com/advisory/ntap-20200724-0005/
Related
osv
osv
CGA-m793-5qmq-mpvg
2024-06-06 12:28:25
Server Side Request Forgery (SSRF) in Kubernetes
2022-02-15 01:57:18
CGA-jmp8-cwq9-qp36
2024-06-06 12:26:07
github
github
Server Side Request Forgery (SSRF) in Kubernetes
2022-02-15 01:57:18
Potential proxy IP restriction bypass in Kubernetes
2022-02-02 00:01:58
hackerone
hackerone
cve
cve
CVE-2020-8555
2020-06-05 17:15:11
CVE-2020-8562
2022-02-01 11:15:10
redhat
redhat
nessus
nessus
RHEL 7 / 8 : OpenShift Container Platform 4.3.25 openshift (RHSA-2020:2440)
2020-06-17 00:00:00
RHEL 7 / 8 : OpenShift Container Platform 4.4.8 openshift (RHSA-2020:2448)
2020-06-23 00:00:00
RHEL 7 / 8 : OpenShift Container Platform 4.2.36 openshift (RHSA-2020:2594)
2020-07-01 00:00:00
ubuntucve
ubuntucve
CVE-2020-8555
2020-06-05 00:00:00
CVE-2020-8562
2022-02-01 00:00:00
alpinelinux
alpinelinux
CVE-2020-8555
2020-06-05 17:15:11
cvelist
cvelist
CVE-2020-8555 Kubernetes kube-controller-manager SSRF
2020-06-04 21:50:11
CVE-2020-8562 Bypass of Kubernetes API Server proxy TOCTOU
2022-02-01 10:33:00
redhatcve
redhatcve
CVE-2020-8555
2020-06-01 21:22:25
prion
prion
Server side request forgery (ssrf)
2020-06-05 17:15:00
Input validation
2022-02-01 11:15:00
nvd
nvd
CVE-2020-8555
2020-06-05 17:15:11
CVE-2020-8562
2022-02-01 11:15:10
debiancve
debiancve
CVE-2020-8555
2020-06-05 17:15:11
CVE-2020-8562
2022-02-01 11:15:10
ibm
ibm
Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes controller manager security vulnerability (CVE-2020-8555)
2020-06-04 13:56:03
gitlab
gitlab
Server-Side Request Forgery (SSRF)
2020-06-05 00:00:00
Time-of-check Time-of-use (TOCTOU) Race Condition
2022-02-02 00:00:00
oraclelinux
oraclelinux
fedora
fedora
[SECURITY] Fedora 32 Update: origin-3.11.2-1.fc32
2020-07-24 01:15:02
openvas
openvas
Fedora: Security Advisory for origin (FEDORA-2020-aeea04cd13)
2020-07-24 00:00:00
photon
photon