~/products/github.com/benc-uk_kubeview

pipeline liveDigest Docs

Github.Com Benc-Uk Kubeview vulnerabilities

1 known vulnerability affecting github.com/benc-uk_kubeview.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

1

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2022-45933P1CRITICALExploitedPoC≥ 0, ≤ 0.1.312022-11-27

CVE-2022-45933 [CRITICAL] CWE-287 KubeView vulnerable to full cluster takeover due to improper authentication KubeView vulnerable to full cluster takeover due to improper authentication KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does not require authentication, and retrieves certificate files that can be used for authentication as kube-admin. NOTE: the vendor's position is that KubeView was a "fun side project and a learning

Github.Com Benc-Uk Kubeview vulnerabilities | cvebase