The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows certain authorized users to leak up to 500 bytes of arbitrary information from unprotected endpoints within the master's host network (such as link-local or loopback services).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade k3s | Aug 22, 2024 | Jun 4, 2020 |
| Debian | — | Upgrade kubernetes | Jul 30, 2024 | Jun 5, 2020 |
| Oracle_linux | — | Upgrade olcne-prometheus-chartUpgrade grafanaUpgrade kubeadm-ha-setupUpgrade olcneUpgrade kubernetes-cni-pluginsUpgrade olcne-istio-chartUpgrade olcne-utilsUpgrade kubeletUpgrade olcne-api-serverUpgrade olcne-agentUpgrade kubeadmUpgrade olcne-nginxUpgrade kubernetes-cniUpgrade kubernetesUpgrade kubectlUpgrade olcnectl | Jun 13, 2020 | Jun 5, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshiftUpgrade openshift | Dec 29, 2020 | Jun 1, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 4, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub