Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jordyvop

#40502of 53,634
6.7Total CVSS
Vulnerabilities · 1
PT-2022-11483
6.7
2022-07-15
Unknown · Fabric 8 Kubernetes Client · CVE-2021-4178
**Name of the Vulnerable Software and Affected Versions** Fabric 8 Kubernetes client versions 5.0.0-beta-1 and above **Description** A flaw was found in the Fabric 8 Kubernetes client due to improperly configured YAML parsing, allowing a local and privileged attacker to supply malicious YAML, which can lead to arbitrary code execution. **Recommendations** For versions 5.0.0-beta-1 and above, consider disabling the YAML parsing functionality until a patch is available to prevent exploitation. Restrict access to the Fabric 8 Kubernetes client to minimize the risk of exploitation by a local and privileged attacker. Avoid using the client with untrusted input to prevent the supply of malicious YAML. At the moment, there is no information about a newer version that contains a fix for this vulnerability.