Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv3

CVE-2020-8559

Published: 22/07/2020 Updated: 27/01/2023
CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8
CVSS v3 Base Score: 6.8 | Impact Score: 5.9 | Exploitability Score: 0.9
VMScore: 535
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Subscribe to Kubernetes

Vulnerability Summary

The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an malicious user to escalate privileges from a node compromise to a full cluster compromise.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

kubernetes kubernetes

Vendor Advisories

Red Hat: Important: OpenShift Container Platform 4.4.33 bug fix and security update
Synopsis Important: OpenShift Container Platform 4433 bug fix and security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 4433 is now available withupdates to packages and images that fix several bugs and add enhancementsThis release also includes a ...
Red Hat: Moderate: OpenShift Container Platform 3.11.343 security and bug fix update
Synopsis Moderate: OpenShift Container Platform 311343 security and bug fix update Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Container Platform release 311343 is now available withupdates to packages and images that fix several bugsThis release includes a security update for Kub ...
Red Hat: Moderate: OpenShift Container Platform 4.5.21 bug fix and security update
Synopsis Moderate: OpenShift Container Platform 4521 bug fix and security update Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Container Platform release 4521 is now available with updates to packages and images that fix several bugsThis release includes a security update for opensh ...
Red Hat: Moderate: OpenShift Container Platform 4.4.32 packages and security update
Synopsis Moderate: OpenShift Container Platform 4432 packages and security update Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Container Platform release 4432 is now available withupdates to packages and images that fix several bugs and add enhancementsThis release also includes a ...
Red Hat: Important: Migration Toolkit for Containers (MTC) 1.7.4 security and bug fix update
Synopsis Important: Migration Toolkit for Containers (MTC) 174 security and bug fix update Type/Severity Security Advisory: Important Topic The Migration Toolkit for Containers (MTC) 174 is now availableRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) ba ...
Red Hat: Moderate: OpenShift Container Platform 4.6.1 image security update
Synopsis Moderate: OpenShift Container Platform 461 image security update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat OpenShift Container Platform 46Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability S ...

Mailing Lists

Full Disclosure: Kubernetes: CVE-2020-8559: Privilege escalation from compromised node to cluster
<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> Kubernetes: CVE-2020-8559: Privilege escalation from compromised node to cluster <!--X-Subject-Header-End--> <!--X-Head-of-Mes ...

Github Repositories

https://github.com/tdwyer/CVE-2020-8559

This is a PoC exploit for CVE-2020-8559 Kubernetes Vulnerability

Kubernetes CVE-2020-8559 Proof of Concept PoC Exploit This is for demonstration purposes only Only for use on systems you are authorized to preform administrative actions on and are authorized to exploit CVE-2020-8559 on This is a PoC for CVE-2020-8559 This vulnerability allows an attacker who has gotten root on a Node to execute commands on any other Container in the cluster

https://github.com/sim1/stars

katlol/stars - An awesome list of my starred repositories

Awesome Stars A curated list of my GitHub stars! Generated by starred Contents AGS Script ActionScript Adblock Filter List Assembly Batchfile C C# C++ CSS Clojure CoffeeScript Crystal D Dart Dockerfile Elixir Elm Emacs Lisp Go HCL HTML Hack Haskell Inno Setup Java JavaScript Jinja Jsonnet Julia Jupyter Notebook Kotlin Less Logos Lua MATLAB MDX Makefile Markdown Mathematica

https://github.com/katlol/stars

katlol/stars - An awesome list of my starred repositories

Awesome Stars A curated list of my GitHub stars! Generated by starred Contents AGS Script ActionScript Adblock Filter List Assembly Batchfile C C# C++ CSS Clojure CoffeeScript Crystal D Dart Dockerfile Elixir Elm Emacs Lisp Go HCL HTML Hack Haskell Inno Setup Java JavaScript Jinja Jsonnet Julia Jupyter Notebook Kotlin Less Logos Lua MATLAB MDX Makefile Markdown Mathematica

References

CWE-601https://github.com/kubernetes/kubernetes/issues/92914https://groups.google.com/d/msg/kubernetes-security-announce/JAIGG5yNROs/19nHQ5wkBwAJhttps://security.netapp.com/advisory/ntap-20200810-0004/https://nvd.nist.govhttps://access.redhat.com/errata/RHSA-2021:0281https://github.com/tdwyer/CVE-2020-8559
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook