PT-2020-6523 · Unknown · Ingress-Nginx

Aledbf + 1 · Published 2020-02-19 · Updated 2024-03-06 · CVE-2020-8553

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions ingress-nginx versions prior to 0.28.0

Description The issue is related to errors in processing hyperlinks in the ingress-nginx controller in a Kubernetes cluster. This can be exploited by a remote attacker to gain access to create, modify, or delete data. Specifically, a user with the ability to create namespaces and to read and create ingress objects can overwrite the password file of another ingress that uses basic authentication with a hyphenated namespace or secret name.

Recommendations For versions prior to 0.28.0, update to version 0.28.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the nginx.ingress.kubernetes.io/auth-type component to minimize the risk of exploitation. Avoid using hyphenated namespace or secret names in ingress objects that use basic authentication until the issue is resolved.

Fix

Weakness Enumeration

CWE-73

CWE-610

Related Identifiers

BDU:2021-06050

BIT-NGINX-INGRESS-CONTROLLER-2020-8553

CVE-2020-8553

GHSA-HHPM-74PM-HF35

Affected Products

Ingress-Nginx

References · 7

• https://bdu.fstec.ru/vul/2021-06050 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8553 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-nginx-ingress-controller-2020-8553 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hhpm-74pm-hf35 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8553 · Security Note
• https://github.com/kubernetes/ingress-nginx · Note
• https://github.com/kubernetes/ingress-nginx/issues/5126 · Note