PoC Index

CVE-2021-25735

MEDIUM 6.5EPSS 5.5%

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.

CVSS v3.1
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v3.1
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v3.1
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v2.0
5.5 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P
EPSS
5.52% chance of exploitation in the next 30 days, 92th percentile
Published
2021-09-06
Updated
2024-09-16

Proof-of-concept exploits (1)

Exploit collections (1)

References

Related