Kubernetes Vulnerability Puts Clusters at Risk of Takeover (CVE-2020-8558)
Unit 42 disclosed CVE-2020-8558, a flaw in kube-proxy's route_localnet setting that exposed nodes' localhost-only services to hosts on the local network and to pods on the node, with details public on April 18, 2020 and a patch released June 1, 2020. Where...