CVE-2021-25735

Related Vulnerabilities: CVE-2021-25735  

A vulnerability was found in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. The highest threat from this vulnerability is to integrity and availability.

Description

A vulnerability was found in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. The highest threat from this vulnerability is to integrity and availability.

Additional Information

  • Bugzilla 1937562: CVE-2021-25735 kubernetes: Validating Admission Webhook does not observe some previous fields
  • CWE-20: Improper Input Validation
  • FAQ: Frequently asked questions about CVE-2021-25735