Kubernetes Remote Code Execution Via Nodes/Proxy GET Permission

grahamhelton.com

cross-posted to:
cybersecurity@infosec.pub

Kubernetes Remote Code Execution Via Nodes/Proxy GET Permission

grahamhelton.com

RSS Bot@lemmy.bestiver.seBM to Lobste.rs@lemmy.bestiver.seEnglish · 8 months ago

cross-posted to:
cybersecurity@infosec.pub

An authorization bypass in Kubernetes RBAC allows for nodes/proxy GET permissions to execute commands in any Pod in the cluster.

Comments

You must log in or register to comment.

Chat

Lobste.rs@lemmy.bestiver.se

lobsters@lemmy.bestiver.se

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !lobsters@lemmy.bestiver.se

Community locked: only moderators can create posts. You can still comment on posts.

RSS Feed of lobste.rs

Source of the RSS Bot

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

1 user / day
1 user / week
1 user / month
3 users / 6 months
0 local subscribers
394 subscribers
504 Posts
0 Comments
Modlog