Privilege Escalation

2020-07-1704:41:18

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

71.5%

JSON

An attacker is able to intercept certain requests to the Kubelet and send a redirect response that may be followed by a client using the credentials from the original request. This can lead to compromise of other nodes.

CPENameOperatorVersion
github.com/kubernetes/kubernetesle0.19.0-rc.0
python-psutileq5.6.3__5.epel8.playground
python-psutileq5.6.3__5.el8
python-psutileq5.4.3__7.el8d
python-psutileq5.2.2__4.el8ost
python-psutileq5.4.3__5.el8ar
python-psutileq5.6.3__1.el8ost
python-psutileq5.0.1__3.el8sat
jqeq1.5__1.el7
jqeq1.5__12.el8

Name	Operator	Version
github.com/kubernetes/kubernetes	le	0.19.0-rc.0
python-psutil	eq	5.6.3__5.epel8.playground
python-psutil	eq	5.6.3__5.el8
python-psutil	eq	5.4.3__7.el8d
python-psutil	eq	5.2.2__4.el8ost
python-psutil	eq	5.4.3__5.el8ar
python-psutil	eq	5.6.3__1.el8ost
python-psutil	eq	5.0.1__3.el8sat
jq	eq	1.5__1.el7
jq	eq	1.5__12.el8