ID:3587 - Exploit for Insufficient verification of data authenticity in CNI Plugins - CVE-2020-10749

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to perform a man-in-the-Middle attack.

The vulnerability exists due to insufficient verification of data authenticity in CNI plugins when processing IPV6 router advertisements. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Remediation