Description

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.

Related CPE's

a

kubernetes

kubernetes

3

References

https://github.com/kubernetes/kubernetes/issues/100096

PatchThird Party Advisory

https://groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y

Mailing ListThird Party Advisory

https://github.com/kubernetes/kubernetes/issues/100096

PatchThird Party Advisory

https://groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y

Mailing ListThird Party Advisory

Weaknesses

[email protected]

Secondary
CWE-372

[email protected]

Primary
NVD-CWE-Other

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

6.5 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2021-09-06T10:15:07.617Z

4 years ago

Last modified

2024-11-21T04:55:19.043Z

1 year ago