Vulnerabilities

Gardener implements the automated management and operation of Kubernetes clusters as a service.

Gardener implements the automated management and operation of Kubernetes clusters as a service.

In Gardener before 0.20.0, incorrect access control in seed clusters allows information disclosure by sending HTTP GET requests from one's own shoot clusters to foreign shoot clusters.

Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster resides in the corresponding seed cluster.