14 lines
870 B
JSON
14 lines
870 B
JSON
{
|
|
"id": "openEuler-SA-2022-1979",
|
|
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2022-1979",
|
|
"title": "An update for kubernetes is now available for openEuler-20.03-LTS-SP1,openEuler-20.03-LTS-SP3 and openEuler-22.03-LTS",
|
|
"severity": "Medium",
|
|
"description": "Container cluster management.\r\n\r\nSecurity Fix(es):\r\n\r\nA security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the\nclient performing unexpected actions as well as forwarding the client's API server credentials to third parties.\r\n\r\nref: https://github.com/kubernetes/kubernetes/issues/112513(CVE-2022-3172)",
|
|
"cves": [
|
|
{
|
|
"id": "CVE-2022-3172",
|
|
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3172",
|
|
"severity": "Medium"
|
|
}
|
|
]
|
|
} |