PT-2018-16844 · Linux Foundation+1 · Kubernetes+1

Publicado 2018-05-18 · Atualizado 2019-09-18 · CVE-2018-5256

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions CoreOS Tectonic versions 1.7.x through 1.7.9-tectonic.4 CoreOS Tectonic versions 1.8.x through 1.8.4-tectonic.3

Description The issue allows unauthenticated access to the Kubernetes API server through an unauthenticated API endpoint at "/api/kubernetes/" which is mounted as a direct proxy to the Kubernetes cluster. This results in an information disclosure, enabling unauthenticated users to list all namespaces through the console. The exposure of this endpoint can provide an attacker with internal cluster state information, potentially assisting in further attacks, such as enumerating namespaces to identify weak authorization policies for privilege escalation.

Recommendations For CoreOS Tectonic versions 1.7.x through 1.7.9-tectonic.4, update to version 1.7.9-tectonic.4 or later. For CoreOS Tectonic versions 1.8.x through 1.8.4-tectonic.3, update to version 1.8.4-tectonic.3 or later. As a temporary workaround, consider restricting access to the "/api/kubernetes/" endpoint to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-5256

Produtos afetados

Coreos Tectonic

Kubernetes

Referências · 4

• https://coreos.com/blog/tectonic-namespace-information-disclosure-vulnerability-patched · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-5256 · Aviso do Fabricante
• https://coreos.com/tectonic/releases/#1.8.4-tectonic.3 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-5256 · Nota de Segurança