Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2020-8555

Kubernetes kube-controller-manager SSRF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
kubernetes

Description

The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows certain authorized users to leak up to 500 bytes of arbitrary information from unprotected endpoints within the master's host network (such as link-local or loopback services).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kubernetes Kubernetes

  • 1.18.0affected
  • 1.1affected
  • 1.2affected
  • 1.3affected
  • 1.4affected
  • 1.5affected
  • 1.6affected
  • 1.7affected
  • 1.8affected
  • 1.9affected
  • 1.10affected
  • 1.11affected
  • 1.12affected
  • 1.13affected
  • 1.14affected
  • 1.15 to < 1.15.12affected
  • 1.16 to < 1.16.9affected
  • 1.17 to < 1.17.5affected

References