CVE-2021-25740

Low

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have…

kubernetes·CWE-441·Published 2021-09-20

CVSS

3.1

EPSS

0.02

KEV

Exploits

cve.orgen

178 chars

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

NVDen

178 chars

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

GHSAen

178 chars

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

NVDes

206 chars

Se ha detectado un problema de seguridad en Kubernetes que podría permitir a usuarios enviar tráfico de red a lugares a los que de otro modo no tendrían acceso por medio de un ataque de tipo confused deputy

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:P/I:N/A:N
3.1	Primary	cve.org	3.1	—	—	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	NVD	3.1	1.6	1.4	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	cve.org	3.1	—	—	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
3.1	Secondary	NVD	3.1	1.6	1.4	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
3.1	Secondary	GHSA	3.1	—	—	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N