Database/Container, Kubernetes & orchestration
Kubernetes: Endpoint/EndpointSlice confused-deputy lets users reach networks they should not
CVE-2021-25740Container, Kubernetes & orchestrationcurated
Impact
Endpoint/EndpointSlice confused-deputy lets users reach networks they should not
Who can reach it
Cluster user with namespace access
What to do
No complete upstream fix; restrict Endpoint creation via admission policy
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.