Read the docs

Kubernetes

Records127All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high49CVSS 7.0–8.9

Exploited now

Kubernetes records in CISA KEV

No Kubernetes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Kubernetes 56 records HIGH Cri-o 10 records HIGH Ingress-nginx 9 records HIGH Minikube 3 records MEDIUM Java 2 records MEDIUM Nginx Ingress Controller 2 records MEDIUM Apiserver 1 record MEDIUM Aws-iam-authenticator 1 record MEDIUM

Records

1 record in Aws-iam-authenticator · all components

TI-2022-02201 CVE-2022-2385 · GHSA-pp3f-98qg-5g75

AccessKeyID validation bypass

Priority MEDIUM 40

A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01101 Published 2022-07-12 Partial fix · v0.5.9, 0.5.9 CWE-20
Open these records in search →