Server-Side Request Forgery (SSRF) in Kubernetes - CVE-2020-8555

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU30267

Server-Side Request Forgery (SSRF) in Kubernetes - CVE-2020-8555

Published: June 5, 2020 / Updated: July 17, 2020


Vulnerability identifier: #VU30267
CSH Severity: Medium
CVSS v4: 6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N]
CVE-ID: CVE-2020-8555
CWE-ID: CWE-918
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote authenticated user to gain access to sensitive information.

The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows certain authorized users to leak up to 500 bytes of arbitrary information from unprotected endpoints within the master's host network (such as link-local or loopback services).


Affected software

Kubernetes
Red Hat OpenShift Container Platform
Fedora
origin
atomic-openshift (Red Hat package)
openshift (Red Hat package)
IBM Cloud Pak for Watson AIOps

How to mitigate CVE-2020-8555

Install update from vendor's website.

Kubernetes - update to 1.17.5
origin - update to 3.11.2-1.fc32
atomic-openshift (Red Hat package) - update to 3.11.232-1.git.0.a5bc32f.el7
openshift (Red Hat package) - addressed in versions 4.2.36-202006211650.p0.git.0.1fe246f.el7, 4.2.36-202006211650.p0.git.0.1fe246f.el8, 4.3.25-202006060952.git.1.96c30f6.el7, 4.3.25-202006060952.git.1.96c30f6.el8, 4.4.0-202006061254.git.1.dc84fb4.el7, 4.4.0-202006061254.git.1.dc84fb4.el8
IBM Cloud Pak for Watson AIOps - update to 4.8.1

External References

Related Security Bulletins