Lucene search

K

Veracode Vulnerability DatabaseVERACODE:39496

HistoryMar 03, 2023 - 2:55 a.m.

Authentication Bypass

2023-03-0302:55:41

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

19

kubernetes

authentication bypass

resourcelocation

software

api server

EPSS

0.002

Percentile

57.8%

github.com/kubernetes/kubernetes is vulnerable to Authentication Bypass. The vulnerability exists because of improper node address validation in the ResourceLocation function of strategy.go, allowing an attacker to bypass the proxy address validation and send malicious requests to the API server’s private network.

References

github.com/advisories/GHSA-jh36-q97c-9928

github.com/kubernetes/kubernetes/commit/327866049e485e3f62d7a7cb847e8b947002ebdf

github.com/kubernetes/kubernetes/commit/78d552efe620879599509ff0f9b04b8764e1878f

github.com/kubernetes/kubernetes/commit/bb7c395dd945766e9d573d4307338d7e61d03f1e

github.com/kubernetes/kubernetes/commit/f85027fcc12d02f79a0649115bdbaf7c9d8aab17

github.com/kubernetes/kubernetes/issues/113757

groups.google.com/g/kubernetes-security-announce/c/VyPOxF7CIbA

security.netapp.com/advisory/ntap-20230505-0007/

EPSS

0.002

Percentile

57.8%

Related for VERACODE:39496

osv4 debiancve1 nvd1 cbl_mariner1 github1 cve1 redhatcve1 prion1 cvelist1 ubuntucve1 fedora2 oraclelinux4 nessus9 ibm1 openvas3 altlinux1 photon2 ics1