One Article Review
| Source |  CVE Liste |
|---|---|
| Identifiant | 4342360 |
| Date de publication | 2022-03-25 19:15:10 (vue: 2022-03-25 21:06:08) |
| Titre | CVE-2022-0759 |
| Texte | A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM). |
| Envoyé | Oui |
| Condensat | 0759 2022 accepting all any api applications are attacks but certificate certs client configure custom cve does ends file files flaw found including kubeclient kubeconfig kubernetes leverage man middle mitm none not parse parsed rest returns ruby susceptible verify versions way when wrongly |
| Tags | |
| Stories | Uber |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.