Database/Container, Kubernetes & orchestration
Kubernetes (kube-apiserver): Unvalidated redirect on proxied upgrade requests lets a compromised node escalate to other
CVE-2020-8559Container, Kubernetes & orchestrationcurated
Impact
Unvalidated redirect on proxied upgrade requests lets a compromised node escalate to other nodes
Who can reach it
An attacker who already owns one node, pivoting cluster-wide
What to do
Rolling control-plane upgrade; no GPU drain
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.