A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.
References
Link | Resource |
---|---|
https://github.com/kubernetes/kubernetes/issues/103675 | Mitigation Third Party Advisory |
https://groups.google.com/g/kubernetes-security-announce/c/WYE9ptrhSLE | Mailing List Mitigation Third Party Advisory |
https://security.netapp.com/advisory/ntap-20211014-0001/ | Third Party Advisory |
Configurations
History
06 Nov 2021, 02:49
Type | Values Removed | Values Added |
---|---|---|
References | (CONFIRM) https://security.netapp.com/advisory/ntap-20211014-0001/ - Third Party Advisory |
14 Oct 2021, 09:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
01 Oct 2021, 13:19
Type | Values Removed | Values Added |
---|---|---|
References | (MLIST) https://groups.google.com/g/kubernetes-security-announce/c/WYE9ptrhSLE - Mailing List, Mitigation, Third Party Advisory | |
References | (CONFIRM) https://github.com/kubernetes/kubernetes/issues/103675 - Mitigation, Third Party Advisory | |
CWE | CWE-610 | |
CPE | cpe:2.3:a:kubernetes:kubernetes:-:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 3.1 |
20 Sep 2021, 17:21
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-09-20 17:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-25740
Mitre link : CVE-2021-25740
CVE.ORG link : CVE-2021-25740
JSON object : View
Products Affected
kubernetes
- kubernetes