CVE-2020-10749
—CVSS 3.1
6.0 medium
EPSS
2%p83
Published
()
Modified
Description
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
- Vendors
- linuxfoundationredhatfedoraproject
- Products
- cni network plugins, openshift container platform, fedora, enterprise linux
- Weakness
- CWE-300
- Vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
In the news0 stories
No ingested article mentions this CVE yet.