Description
kube-state-metrics 1.7.0版本和1.7.1版本中存在安全漏洞。攻击者可利用该漏洞泄露敏感信息。
kubernetes-metrics信息泄露漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2019-10223
http://zone.ci/vulns/ys/316711.html
https://www.cnvd.org.cn/flaw/show/CNVD-2020-64317
https://ddpoc.com/DVB-2026-11271.html
https://cloud.tencent.com/developer/article/2494698
https://www.htstack.com/news/124575.shtml
https://zone.huoxian.cn/d/1333-kubecon-prometheus-kubernetes
https://kb.transwarp.cn/posts/13346
https://www.sysdig.com/blog/exposed-prometheus-exploit-kubernetes-kubeconeu