PT-2021-6571 · Unknown · Kubernetes

Qiqi Xu · Published 2021-09-01 · Updated 2026-06-01 · CVE-2020-8561

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kubernetes (affected versions not specified)

Description A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs when the log level is set to 10, they can view the redirected responses and headers in the logs. The issue is related to errors in processing hyperlinks, which can allow a remote attacker to access confidential data. Additionally, the kube-apiserver, scheduler, controller-manager, and kubelet have profiling enabled by default, and access to this information can be obtained by accessing the /debug/pprof/profile endpoint, although necessary RBAC rights are required for kube-apiserver, kube-controller-manager, and kube-scheduler.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-610

CWE-441

Related Identifiers

BDU:2022-01837

CVE-2020-8561

GHSA-74J8-88MM-7496

Affected Products

Kubernetes

References · 21

• https://nvd.nist.gov/vuln/detail/CVE-2020-8561 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-8561 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-8561 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-01837 · Security Note
• https://osv.dev/vulnerability/GHSA-74j8-88mm-7496 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-8561 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-8561 · Security Note
• https://ubuntu.com/security/CVE-2020-8561 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-8561 · Vendor Advisory
• https://github.com/kubernetes/kubernetes · Note
• https://github.com/kubernetes/kubernetes/issues/104720 · Note
• https://reddit.com/r/kubermatic/comments/1tre0r8/kubermatic_weekly_may_29_2026_kkp_v2304_adds · Reddit Post
• https://kubernetes.io/blog/2026/05/26/reconciling-unfixed-kubernetes-cves · Note
• https://reddit.com/r/devops_cloud_news/comments/1toyv61/kubernetes_corrects_unfixed_cve_records_on_june_1 · Reddit Post
• https://t.me/cvenotify/21776 · Telegram Post