Plaintext storage of a password on kubernetes release bucket #872190 Informative Authentication – 2021-01-07 – – Internal IP addresses range and AWS cluster region leaked in a Github repository #877303 Informative Information Disclosure – 2020-07-24 – – Hard coded Username and password in GiHub commit #877402 Informative Authentication – 2020-07-24 – – Configuartion [Sensitive] Information Disclosure #774872 Informative Information Disclosure – 2020-10-22 – 1 Sensitive Information disclosure Through Config File #775123 Duplicate Information Disclosure – 2020-07-24 – 1 There is any issue No valid SPF Records #864696 Duplicate Authentication – 2020-07-24 – 1 Private IP addresses Disclosure #908880 Informative Information Disclosure – 2020-07-23 – 1 CVE-2019-11250 remains in effect. #952771 Valid Cryptography – 2020-11-29 – 1 csi-snapshot-controller crashes when processing VolumeSnapshot with non-existing PVC #995699 Duplicate Memory Corruption – 2021-01-07 – 1 Kubelet follows symlinks as root in /var/log from the /logs server endpoint #1036886 Informative Access Control – 2021-04-01 – 1 kubectl creating secrets from stringData leaves secret in plain text #1102064 Informative Cryptography – 2021-08-21 – 1 Man in the middle using LoadBalancer or ExternalIPs services #764986 Valid Cryptography – 2021-11-04 – 2 Github test clientID and clientSecret leaked #796139 Informative Authentication – 2020-07-24 – 2 "Self" DOS with large deployment and scaling #831654 N/A Denial of Service – 2020-07-23 – 2 exposed Git Repo at http://api.e2e-kops-aws-canary.test-cncf-aws.canary.k8s.io/.git/ #970520 Duplicate Information Disclosure – 2021-01-07 – 2 API Server DoS (crash?) if many large resources (~1MB each) are concurrently/repeatedly sent to an external Validating WebHook endpoint #1096907 Informative Denial of Service – 2021-04-01 – 2 Fake email from <any_name>@kubernetes.io to any other email #918243 Duplicate No weakness recorded – 2020-07-24 – 3 secret leaks in vsphere cloud controller manager log #966383 Valid Cryptography – 2020-11-29 $500 3 AWS Load Balancer Controller can be used by an attacker to modify rules of any Security Group that they are able to tag #1238482 N/A Injection and Smuggling – 2022-06-02 $500 3 DoS for GCSArtifact.RealAll #833856 Valid Denial of Service – 2021-02-04 – 4 Private RSA key and Server key exposed on the GitHub repository #876751 N/A Cryptography – 2020-10-22 – 4 Man in the middle leading to root privilege escalation using hostNetwork=true (CAP_NET_RAW considered harmful) #899103 Informative Cryptography – 2021-10-08 – 4 Unsecured Grafana instance on https://monitoring.prow-canary.k8s.io/dashboards #1000922 Duplicate Authentication – 2021-01-07 – 4 Broken link hijacing in https://kubernetes-csi.github.io/docs/drivers.html #1212853 Valid Misconfiguration and Insecure Design – 2021-11-06 – 4 Broken Github Link Used in deployment docs of "github.com/kubernetes/kompose" #1398617 Valid Access Control – 2021-12-16 – 4 No valid SPF record found #775531 N/A Authentication – 2020-02-04 – 5 Clickjacking #832593 Informative Misconfiguration and Insecure Design – 2020-07-23 – 5 KOPS documentation references domains which were not registered #1092859 Valid Access Control – 2021-04-02 – 5 Holes in EndpointSlice Validation Enable Host Network Hijack #1145044 Valid Access Control – 2021-09-05 – 5 AWS Load Balancer Controller Managed Security Groups can be replaced by an unprivileged attacker #1238017 N/A Injection and Smuggling – 2022-06-02 $500 5 Grafana Improper authorization #802011 Valid Access Control – 2020-10-31 – 6 DoS for client-go jsonpath func #882923 Valid Denial of Service – 2020-07-24 – 6 Broken Link Takeover from kubernetes.io docs #1398572 Valid Access Control – 2021-12-16 – 6 Bypass apiserver proxy filter #859962 Valid Race Conditions – 2021-05-27 – 7 kubeadm logs tokens before deleting them #972561 Valid Authentication – 2020-11-21 – 7 Tokenless GUI Authentication #1350755 Valid Authentication – 2021-11-04 – 7 Compromise of auth via subset/superset namespace names. #778803 Valid Authentication – 2020-10-30 – 8 Kubelet resource exhaustion attack via metric label cardinality explosion from unauthenticated requests #774896 Valid Denial of Service – 2020-10-31 – 9 XSS on kubernetes-csi.github.io (mdBook) #1073514 Informative Cross-site Scripting – 2021-02-04 – 9 IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements #819717 Valid Cryptography – 2021-11-07 – 10 Compromise of node can lead to compromise of pods on other nodes #863979 Valid No weakness recorded – 2020-10-30 – 10 The `io.kubernetes.client.util.generic.dynamic.Dynamics` contains a code execution vulnerability due to SnakeYAML #1807214 Valid Command and Code Injection – 2023-04-25 $1,000 10 SHA512 incorrect on most/many releases #1130416 Valid Cryptography – 2021-05-09 – 11 Username enumeration via Openssh 7.6 #776461 Informative No weakness recorded – 2020-02-04 – 12 Broken Link Hijacking on kubernetes.io Documentation #1331361 Valid Access Control – 2021-11-06 – 12 Route53 Subdomain Takeover on test-cncf-aws.canary.k8s.io #794382 Duplicate Misconfiguration and Insecure Design – 2021-01-16 – 13 Index Out Of Bounds in protobuf unmarshalling #1073363 Valid Memory Corruption – 2021-08-30 $250 13 Node Validation Admission does not observe all oldObject fields #1095612 Valid Access Control – 2021-09-05 – 14 Google storage bucket takeover which is used to load JS file in dashboard.html in "github.com/kubernetes/release" which can lead to XSS #1398706 Valid Access Control – 2021-12-16 – 14 Git Arg Injection in kubernetes-sigs/release-sdk #1763704 Valid No weakness recorded – 2023-05-25 $100 14