Vulnerability · Published Jul 22, 2020 · Assigned by kubernetes
CVE-2020-8559Privilege escalation from compromised node to cluster
Medium 6.4
In plain English
A medium-severity open redirect in Kubernetes from Kubernetes. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 6.1% (higher than 93% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | k3s | 1.18.6.1-r0 | ALPINE-CVE-2020-8559 |
| Alpine:v3.21 | k3s | 1.18.6.1-r0 | ALPINE-CVE-2020-8559 |
| Alpine:v3.22 | k3s | 1.18.6.1-r0 | ALPINE-CVE-2020-8559 |
| Alpine:v3.23 | k3s | 1.18.6.1-r0 | ALPINE-CVE-2020-8559 |
| Alpine:v3.24 | k3s | 1.18.6.1-r0 | ALPINE-CVE-2020-8559 |
| Debian:12 | kubernetes | 1.18.5-1 | DEBIAN-CVE-2020-8559 |
| Debian:13 | kubernetes | 1.18.5-1 | DEBIAN-CVE-2020-8559 |
| Debian:14 | kubernetes | 1.18.5-1 | DEBIAN-CVE-2020-8559 |
| Go | k8s.io/apimachinery | 0.16.13, 0.17.9, 0.18.7-rc.0 | GO-2024-2748 |
| Go | k8s.io/apimachinery | 0.16.13 | GHSA-33c5-9fx5-fvjm |
| Go | k8s.io/apimachinery | 0.17.9 | GHSA-33c5-9fx5-fvjm |
| Go | k8s.io/apimachinery | 0.18.7 | GHSA-33c5-9fx5-fvjm |
| Go | k8s.io/kubernetes | 1.17.9 | GHSA-33c5-9fx5-fvjm |
| Go | k8s.io/kubernetes | 1.16.13 | GHSA-33c5-9fx5-fvjm |
| Go | k8s.io/kubernetes | 1.18.7 | GHSA-33c5-9fx5-fvjm |
| Go | k8s.io/kubernetes | 1.16.13, 1.17.9, 1.18.7 | GO-2024-2748 |
| Ubuntu:22.04:LTS | kubernetes | no fix listed | UBUNTU-CVE-2020-8559 |
| Ubuntu:24.04:LTS | kubernetes | no fix listed | UBUNTU-CVE-2020-8559 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Kubernetes | Kubernetes | 1.61.71.81.91.101.111.121.13 |
Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
References
- https://groups.google.com/d/msg/kubernetes-security-announce/JAIGG5yNROs/19nHQ5wkBwAJ x_refsource_MISC
- https://github.com/kubernetes/kubernetes/issues/92914 x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20200810-0004/ x_refsource_CONFIRM