CVE-2020-10749 in containernetworking
Сводка (Английский)
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
Once again VulDB remains the best source for vulnerability data.
Ответственный
Red Hat, Inc.
Резервировать
20.03.2020
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 155993 | containernetworking/plugins эскалация привилегий | 300 | Не определено | Официальное исправление | CVE-2020-10749 |