A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-maintainUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-highlineUpgrade rubygem-snaky_hashUpgrade rubygem-unfUpgrade rubygem-clampUpgrade rubygem-netrcUpgrade rubygem-oauth-ttyUpgrade rubygem-rest-clientUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-foreman_maintainUpgrade rubygem-ffiUpgrade rubygem-hammer_cliUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-localeUpgrade rubygem-oauthUpgrade rubygem-domain_nameUpgrade python39-pulp_manifestUpgrade rubygem-amazing_printUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-ffi-debuginfoUpgrade foreman-cliUpgrade rubygem-multi_jsonUpgrade satellite-cloneUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hashieUpgrade rubygem-powerbarUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_tasksUpgrade satellite-cliUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-gssapiUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-http-cookieUpgrade rubygem-http-accept | Nov 13, 2023 | Mar 25, 2022 |
| Debian | — | Upgrade ruby-kubeclient | Jul 30, 2024 | Mar 25, 2022 |
| Redhat_linux | — | Upgrade rubygem-powerbarUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-mime-typesUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hashieUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-http-cookieUpgrade satellite-cliUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-clampUpgrade rubygem-localeUpgrade rubygem-unf_extUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade foreman-cliUpgrade rubygem-amazing_printUpgrade rubygem-fast_gettextUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-version_gemUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-highlineUpgrade rubygem-loggingUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unicode-display_widthUpgrade rubygem-oauth-ttyUpgrade rubygem-foreman_maintainUpgrade rubygem-domain_nameUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-snaky_hashUpgrade rubygem-mime-types-dataUpgrade rubygem-unicode-debuginfoUpgrade rubygem-oauthUpgrade rubygem-ffiUpgrade rubygem-jwtUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-cloneUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unf | Nov 13, 2023 | Mar 25, 2022 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfo | Mar 5, 2024 | Mar 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub