Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)

CVE-2022-3172

What is CVE-2022-3172?

A security issue in kube-apiserver allows an aggregated API server to redirect client traffic to unauthorized URLs. This vulnerability poses risks, as clients may unknowingly perform unintended actions while their API server credentials could be exposed to malicious third parties. Users are advised to review and update their systems to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References