CVE-2020-8559
MEDIUMKubernetes <v1.16.13,v1.17.9,v1.18.6 - Open Redirect
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2020-8559. PoCs published by tdwyer, tabbysable.
AI-analyzed exploit summary This repository provides a functional proof-of-concept exploit for CVE-2020-8559, which allows an attacker with root access on a Kubernetes node to execute commands on other containers in the cluster by leveraging HTTP redirects in the kubelet server. The exploit involves modifying the kubelet binary to send malicious 302 redirects when specific API paths are accessed.
Description
The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise.
Exploits (2)
This repository provides a functional proof-of-concept exploit for CVE-2020-8559, which allows an attacker with root access on a Kubernetes node to execute commands on other containers in the cluster by leveraging HTTP redirects in the kubelet server. The exploit involves modifying the kubelet binary to send malicious 302 redirects when specific API paths are accessed.
This repository contains a functional exploit for CVE-2020-8559, which manipulates iptables to intercept and redirect Kubernetes kubelet traffic, bypassing authentication by rewriting HTTP responses. The script uses OpenSSL to ferry TLS connections and modify response codes to achieve unauthorized access.
References (3)
Scores
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H