Every CVE Search/ Get API key

CVE-2021-25735

Validating Admission Webhook does not observe some previous fields

6.5 MediumPublic exploitFix available

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
High

Exploit likelihood

5.38%Up 2.5 points since Sep 6, 2021
90%50%10%1%

What each source reports

CVE List Score used 6.5

Validating Admission Webhook does not observe some previous fields

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.

Record
CVE-2021-25735
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-372
Updated
2026-11-02
EUVDEUVD-2021-1071 6.5

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.

Record
EUVD-2021-1071
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-g42g-737j-qx6j 6.5

Access Restriction Bypass in kube-apiserver

A vulnerability in Kubernetes kube-apiserver could allow node updates to bypass a Validating Admission Webhook and allow unauthorized node updates. The information that is provided to the admission controller could contain old configurations that overwrite values used for validation. Since the overwriting takes place before the validation, this could lead the admission controller to accept requests that should be blocked. The vulnerability can be exploited when an update action on node resources is performed and an admission controller is in place and configured to validate the action.

Users are only affected by this vulnerability if they are running a Validating Admission Webhook for Nodes that denies admission based partially on the old state of the Node object. It only impacts validating admission plugins that rely on old values in certain fields and does not impact calls from kubelets that go through the built-in NodeRestriction admission plugin.

Record
GHSA-g42g-737j-qx6j
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-284, CWE-372, CWE-863
Updated
2026-11-02
NVD 6.5

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.

Record
CVE-2021-25735
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0
5.5 MediumAV:N/AC:L/Au:S/C:N/I:P/A:P
Weakness
CWE-372
Updated
2026-11-02
OSVALPINE-CVE-2021-25735 6.5

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.

Record
ALPINE-CVE-2021-25735
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-03
OSV 6.5

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.

Record
CVE-2021-25735
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVDEBIAN-CVE-2021-25735 6.5

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.

Record
DEBIAN-CVE-2021-25735
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVGHSA-g42g-737j-qx6j 6.5

Access Restriction Bypass in kube-apiserver

A vulnerability in Kubernetes kube-apiserver could allow node updates to bypass a Validating Admission Webhook and allow unauthorized node updates. The information that is provided to the admission controller could contain old configurations that overwrite values used for validation. Since the overwriting takes place before the validation, this could lead the admission controller to accept requests that should be blocked. The vulnerability can be exploited when an update action on node resources is performed and an admission controller is in place and configured to validate the action.

Users are only affected by this vulnerability if they are running a Validating Admission Webhook for Nodes that denies admission based partially on the old state of the Node object. It only impacts validating admission plugins that rely on old values in certain fields and does not impact calls from kubelets that go through the built-in NodeRestriction admission plugin.

Record
GHSA-g42g-737j-qx6j
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-284, CWE-372, CWE-863
Updated
2026-11-02
OSVOESA-2021-1373 6.5

kubernetes security update

Container cluster management.

Security Fix(es):

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.(CVE-2021-25737)

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.(CVE-2021-25735)

Record
OESA-2021-1373
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:2437 8.6

Red Hat Security Advisory: OpenShift Container Platform 4.8.2 packages and security update

Record
RHSA-2021:2437
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-25735 6.5

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.

Record
UBUNTU-CVE-2021-25735
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVGO-2022-0907 No score

Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

Record
GO-2022-0907
Updated
2026-11-02
OSVopenSUSE-SU-2025:15424-1 No score

govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250807T150727-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15424-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
k8s.io/kubernetes
Go
1.20.0 to 1.20.5
1.20.6
k8s.io/kubernetes
Go
1.19.0 to 1.19.9
1.19.10
k8s.io/kubernetes
Go
through 1.18.17
1.18.18
k3s
Alpine:v3.14
before 1.20.6.1-r0
1.20.6.1-r0
k3s
Alpine:v3.15
before 1.20.6.1-r0
1.20.6.1-r0
k3s
Alpine:v3.16
before 1.20.6.1-r0
1.20.6.1-r0
k3s
Alpine:v3.17
before 1.20.6.1-r0
1.20.6.1-r0
k3s
Alpine:v3.18
before 1.20.6.1-r0
1.20.6.1-r0
k3s
Alpine:v3.19
before 1.20.6.1-r0
1.20.6.1-r0
k3s
Alpine:v3.20
before 1.20.6.1-r0
1.20.6.1-r0
Show 194 moreShow less
Affected packages
PackageAffectedFixed
k3s
Alpine:v3.21
before 1.20.6.1-r0
1.20.6.1-r0
k3s
Alpine:v3.22
before 1.20.6.1-r0
1.20.6.1-r0
k3s
Alpine:v3.23
before 1.20.6.1-r0
1.20.6.1-r0
k3s
Alpine:v3.24
before 1.20.6.1-r0
1.20.6.1-r0
kubernetes
Debian:12
before 1.20.5+really1.20.2-1
1.20.5+really1.20.2-1
kubernetes
Debian:13
before 1.20.5+really1.20.2-1
1.20.5+really1.20.2-1
kubernetes
Debian:14
before 1.20.5+really1.20.2-1
1.20.5+really1.20.2-1
k8s.io/kubernetes
Go
1.20.0 up to 1.20.6
1.20.6
k8s.io/kubernetes
Go
1.19.0 up to 1.19.10
1.19.10
k8s.io/kubernetes
Go
before 1.18.18
1.18.18
k8s.io/kubernetes
Go
before 1.18.18, 1.19.0 up to 1.19.10, 1.20.0 up to 1.20.6
1.18.181.19.101.20.6
kubernetes
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
before 1.20.2-5.oe1
1.20.2-5.oe1
kubernetes
openEuler:20.03-LTS-SP2
From an advisory covering 2 CVEs
before 1.20.2-5.oe1
1.20.2-5.oe1
ignition
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-validate
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-validate-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
openshift
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
openshift-clients
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
openshift-clients-redistributable
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
openshift-hyperkube
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
openshift
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
openshift-clients
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
openshift-clients-redistributable
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
cri-o
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:1.21.2-5.rhaos4.8.gitb27d974.el7
0:1.21.2-5.rhaos4.8.gitb27d974.el7
cri-o-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:1.21.2-5.rhaos4.8.gitb27d974.el7
0:1.21.2-5.rhaos4.8.gitb27d974.el7
cri-tools
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:1.21.0-2.el7
0:1.21.0-2.el7
cri-tools-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:1.21.0-2.el7
0:1.21.0-2.el7
haproxy
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:2.2.13-1.el7
0:2.2.13-1.el7
haproxy-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:2.2.13-1.el7
0:2.2.13-1.el7
openshift-ansible
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
openshift-ansible-test
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
runc
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:1.0.0-98.rhaos4.8.gitcd80260.el7
0:1.0.0-98.rhaos4.8.gitcd80260.el7
runc-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
before 0:1.0.0-98.rhaos4.8.gitcd80260.el7
0:1.0.0-98.rhaos4.8.gitcd80260.el7
afterburn
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
afterburn-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
atomic-openshift-service-idler
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8
0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8
butane
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.12.1-1.rhaos4.8.el8
0:0.12.1-1.rhaos4.8.el8
butane-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.12.1-1.rhaos4.8.el8
0:0.12.1-1.rhaos4.8.el8
console-login-helper-messages
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.20.3-1.rhaos4.8.el8
0:0.20.3-1.rhaos4.8.el8
console-login-helper-messages-issuegen
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.20.3-1.rhaos4.8.el8
0:0.20.3-1.rhaos4.8.el8
console-login-helper-messages-profile
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.20.3-1.rhaos4.8.el8
0:0.20.3-1.rhaos4.8.el8
coreos-installer
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-bootinfra
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-bootinfra-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
cri-o
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:1.21.2-5.rhaos4.8.gitb27d974.el8
0:1.21.2-5.rhaos4.8.gitb27d974.el8
cri-o-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:1.21.2-5.rhaos4.8.gitb27d974.el8
0:1.21.2-5.rhaos4.8.gitb27d974.el8
cri-o-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:1.21.2-5.rhaos4.8.gitb27d974.el8
0:1.21.2-5.rhaos4.8.gitb27d974.el8
cri-tools
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:1.21.0-2.el8
0:1.21.0-2.el8
cri-tools-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:1.21.0-2.el8
0:1.21.0-2.el8
cri-tools-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:1.21.0-2.el8
0:1.21.0-2.el8
haproxy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.2.13-1.el8
0:2.2.13-1.el8
haproxy-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.2.13-1.el8
0:2.2.13-1.el8
ironic-images
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
ironic-images-all
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
ironic-images-ipa-ppc64le
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
ironic-images-ipa-x86_64
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
jenkins
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.289.1.1624020353-1.el8
0:2.289.1.1624020353-1.el8
jenkins-2-plugins
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.1624022417-1.el8
0:4.8.1624022417-1.el8
kata-containers
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.1.0-4.el8
0:2.1.0-4.el8
openshift-kuryr
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openshift-kuryr-cni
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openshift-kuryr-common
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openshift-kuryr-controller
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openstack-ironic
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-api
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-common
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-conductor
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-inspector
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-inspector-api
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-inspector-conductor
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-inspector-dnsmasq
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-python-agent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:7.0.2-0.20210611153100.bfa97cb.el8
0:7.0.2-0.20210611153100.bfa97cb.el8
openvswitch2.15
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
openvswitch2.15-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
openvswitch2.15-devel
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
openvswitch2.15-ipsec
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
ostree
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-devel
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-grub2
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-libs
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-libs-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ovn2.13
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-central
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-central-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-host
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-host-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-vtep
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-vtep-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
podman
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-catatonit-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-docker
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-plugins-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-remote
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-remote-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.0.1-6.el8
0:3.0.1-6.el8
python-debtcollector
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.2.0-0.20210324220630.649189d.el8
0:2.2.0-0.20210324220630.649189d.el8
python-eventlet
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.25.2-4.el8
0:0.25.2-4.el8
python-hardware
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.27.0-0.20210406121246.756fedb.el8
0:0.27.0-0.20210406121246.756fedb.el8
python-ironic-lib
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.6.2-0.20210608101214.ca2e4ba.el8
0:4.6.2-0.20210608101214.ca2e4ba.el8
python-ironic-prometheus-exporter
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.2.1-0.20210325143713.70e39c8.el8
0:2.2.1-0.20210325143713.70e39c8.el8
python-jsonschema
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.2.0-5.el8ost
0:3.2.0-5.el8ost
python-keystoneauth1
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.3.0-0.20210325001456.6a66271.el8
0:4.3.0-0.20210325001456.6a66271.el8
python-kubernetes
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:12.0.1-1.el8
0:12.0.1-1.el8
python-openshift
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 1:0.12.1-1.el8
1:0.12.1-1.el8
python-openstacksdk
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.53.0-0.20210325011601.4629245.el8
0:0.53.0-0.20210325011601.4629245.el8
python-oslo-concurrency
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python-oslo-concurrency-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python-oslo-config
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 2:8.5.0-0.20210325050501.cfa2564.el8
2:8.5.0-0.20210325050501.cfa2564.el8
python-oslo-context
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.2.0-0.20210325043103.0d02866.el8
0:3.2.0-0.20210325043103.0d02866.el8
python-oslo-db
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python-oslo-db-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python-oslo-i18n
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:5.0.1-0.20210324221600.73187bd.el8
0:5.0.1-0.20210324221600.73187bd.el8
python-oslo-i18n-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:5.0.1-0.20210324221600.73187bd.el8
0:5.0.1-0.20210324221600.73187bd.el8
python-oslo-log
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python-oslo-log-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python-oslo-policy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.7.0-0.20210325051823.d853485.el8
0:3.7.0-0.20210325051823.d853485.el8
python-oslo-policy-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.7.0-0.20210325051823.d853485.el8
0:3.7.0-0.20210325051823.d853485.el8
python-oslo-serialization
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.1.0-0.20210325012242.8445e61.el8
0:4.1.0-0.20210325012242.8445e61.el8
python-oslo-service
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.5.0-0.20210325014731.d25e454.el8
0:2.5.0-0.20210325014731.d25e454.el8
python-oslo-upgradecheck
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:1.3.0-0.20210325003851.9f95a6e.el8
0:1.3.0-0.20210325003851.9f95a6e.el8
python-oslo-utils
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python-oslo-utils-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python-pyrsistent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.16.0-3.el8ost
0:0.16.0-3.el8ost
python-stevedore
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.3.0-0.20210325001012.7d7154f.el8
0:3.3.0-0.20210325001012.7d7154f.el8
python-sushy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.7.1-0.20210428165244.bc49878.el8
0:3.7.1-0.20210428165244.bc49878.el8
python-sushy-oem-idrac
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.0.1-0.20210326152858.83b7eb0.el8
0:2.0.1-0.20210326152858.83b7eb0.el8
python-tooz
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.8.0-0.20210324235001.54448e9.el8
0:2.8.0-0.20210324235001.54448e9.el8
python3-debtcollector
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.2.0-0.20210324220630.649189d.el8
0:2.2.0-0.20210324220630.649189d.el8
python3-eventlet
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.25.2-4.el8
0:0.25.2-4.el8
python3-hardware
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.27.0-0.20210406121246.756fedb.el8
0:0.27.0-0.20210406121246.756fedb.el8
python3-hardware-detect
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.27.0-0.20210406121246.756fedb.el8
0:0.27.0-0.20210406121246.756fedb.el8
python3-ironic-inspector-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
python3-ironic-lib
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.6.2-0.20210608101214.ca2e4ba.el8
0:4.6.2-0.20210608101214.ca2e4ba.el8
python3-ironic-prometheus-exporter
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.2.1-0.20210325143713.70e39c8.el8
0:2.2.1-0.20210325143713.70e39c8.el8
python3-ironic-python-agent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:7.0.2-0.20210611153100.bfa97cb.el8
0:7.0.2-0.20210611153100.bfa97cb.el8
python3-ironic-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
python3-jsonschema
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.2.0-5.el8ost
0:3.2.0-5.el8ost
python3-keystoneauth1
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.3.0-0.20210325001456.6a66271.el8
0:4.3.0-0.20210325001456.6a66271.el8
python3-kubernetes
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:12.0.1-1.el8
0:12.0.1-1.el8
python3-kubernetes-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:12.0.1-1.el8
0:12.0.1-1.el8
python3-kuryr-kubernetes
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
python3-openshift
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 1:0.12.1-1.el8
1:0.12.1-1.el8
python3-openstacksdk
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.53.0-0.20210325011601.4629245.el8
0:0.53.0-0.20210325011601.4629245.el8
python3-openstacksdk-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.53.0-0.20210325011601.4629245.el8
0:0.53.0-0.20210325011601.4629245.el8
python3-openvswitch2.15
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
python3-openvswitch2.15-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
python3-oslo-concurrency
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python3-oslo-concurrency-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python3-oslo-config
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 2:8.5.0-0.20210325050501.cfa2564.el8
2:8.5.0-0.20210325050501.cfa2564.el8
python3-oslo-context
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.2.0-0.20210325043103.0d02866.el8
0:3.2.0-0.20210325043103.0d02866.el8
python3-oslo-db
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python3-oslo-db-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python3-oslo-i18n
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:5.0.1-0.20210324221600.73187bd.el8
0:5.0.1-0.20210324221600.73187bd.el8
python3-oslo-log
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python3-oslo-log-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python3-oslo-policy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.7.0-0.20210325051823.d853485.el8
0:3.7.0-0.20210325051823.d853485.el8
python3-oslo-serialization
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.1.0-0.20210325012242.8445e61.el8
0:4.1.0-0.20210325012242.8445e61.el8
python3-oslo-serialization-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.1.0-0.20210325012242.8445e61.el8
0:4.1.0-0.20210325012242.8445e61.el8
python3-oslo-service
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.5.0-0.20210325014731.d25e454.el8
0:2.5.0-0.20210325014731.d25e454.el8
python3-oslo-service-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.5.0-0.20210325014731.d25e454.el8
0:2.5.0-0.20210325014731.d25e454.el8
python3-oslo-upgradecheck
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:1.3.0-0.20210325003851.9f95a6e.el8
0:1.3.0-0.20210325003851.9f95a6e.el8
python3-oslo-utils
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python3-oslo-utils-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python3-pyrsistent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.16.0-3.el8ost
0:0.16.0-3.el8ost
python3-pyrsistent-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.16.0-3.el8ost
0:0.16.0-3.el8ost
python3-stevedore
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.3.0-0.20210325001012.7d7154f.el8
0:3.3.0-0.20210325001012.7d7154f.el8
python3-sushy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.7.1-0.20210428165244.bc49878.el8
0:3.7.1-0.20210428165244.bc49878.el8
python3-sushy-oem-idrac
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.0.1-0.20210326152858.83b7eb0.el8
0:2.0.1-0.20210326152858.83b7eb0.el8
python3-sushy-oem-idrac-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.0.1-0.20210326152858.83b7eb0.el8
0:2.0.1-0.20210326152858.83b7eb0.el8
python3-sushy-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:3.7.1-0.20210428165244.bc49878.el8
0:3.7.1-0.20210428165244.bc49878.el8
python3-tooz
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:2.8.0-0.20210324235001.54448e9.el8
0:2.8.0-0.20210324235001.54448e9.el8
redhat-release-coreos
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:48.84-4.el8
0:48.84-4.el8
rteval-loads
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:1.4-12.el8
0:1.4-12.el8
rteval-loads-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:1.4-12.el8
0:1.4-12.el8
runc
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:1.0.0-98.rhaos4.8.gitcd80260.el8
0:1.0.0-98.rhaos4.8.gitcd80260.el8
runc-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:1.0.0-98.rhaos4.8.gitcd80260.el8
0:1.0.0-98.rhaos4.8.gitcd80260.el8
runc-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:1.0.0-98.rhaos4.8.gitcd80260.el8
0:1.0.0-98.rhaos4.8.gitcd80260.el8
rust-afterburn
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
rust-afterburn-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
stress-ng
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.12.06-1.el8
0:0.12.06-1.el8
stress-ng-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.12.06-1.el8
0:0.12.06-1.el8
toolbox
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
before 0:0.0.8-3.rhaos4.8.el8
0:0.0.8-3.rhaos4.8.el8
govulncheck-vulndb
openSUSE:Tumbleweed
From an advisory covering 44 CVEs
before 0.0.20250807T150727-1.1
0.0.20250807T150727-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubdarryk10/CVE-2021-257352021-04-22

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-25735 is a medium vulnerability (CVSS 6.5) in Kubernetes, published May 28, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.38%, the 92nd percentile. Fixed in k8s.io/kubernetes 1.20.6.

References

Show 167 moreShow less
MoveEnter Open