CVE-2021-25735
CVE-2021-25735 · Validating Admission Webhook does not observe some previous fields
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
CVSS 6.5 · Media · EPSS 5,4% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system · containers
Productos y versiones afectados
kubernetes
- Versiones
- ≥ unspecified, ≤ 1.18.17: Afectada (custom)
- ≥ unspecified, ≤ 1.19.9: Afectada (custom)
- ≥ unspecified, ≤ 1.20.5: Afectada (custom)
Sin corrección publicada
kubernetes Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.20.5+really1.20.2-1
Actualiza a 1.20.5+really1.20.2-1
kubernetes Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.20.5+really1.20.2-1
Actualiza a 1.20.5+really1.20.2-1
kubernetes Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.20.5+really1.20.2-1
Actualiza a 1.20.5+really1.20.2-1