Database/Container, Kubernetes & orchestration

Kubernetes (kube-apiserver): Aggregated API server can redirect apiserver clients

CVE-2022-3172Container, Kubernetes & orchestrationcurated

Impact

Aggregated API server can redirect apiserver clients; SSRF from the control plane

Who can reach it

Whoever controls an aggregated APIService backend

What to do

Rolling control-plane upgrade; audit registered APIServices

References

https://kubernetes.io/docs/reference/issues-security/official-cve-feed/

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.