k8s Vulnerabilities
33 vulnerabilities related to k8s
- PoC2025-08-01CVE-2025-1974-k8s: Ingress-Nginx Controller - Unauthenticated Remote Code Execution
- PoC2025-08-01k8s-cpu-limits-not-set: CPU limits not set in Deployments
- PoC2025-08-01k8s-cpu-requests-not-set: CPU Requests not set in Deployments
- PoC2025-08-01k8s-default-namespace-used: Default Namespace Usage in Deployments
- PoC2025-08-01k8s-host-ports-check: Host ports should not be used
- PoC2025-08-01k8s-image-pull-policy-always: Image Pull Policy set to Always
- PoC2025-08-01k8s-image-tag-not-fixed: Image Tag should be fixed - not latest or blank
- PoC2025-08-01k8s-liveness-probe-not-configured: Liveness Probe Not Configured in Deployments
- PoC2025-08-01k8s-memory-limits-not-set: Memory limits not set in Deployments
- PoC2025-08-01k8s-memory-requests-not-set: Memory requests not set in Deployments
- PoC2025-08-01k8s-root-container-admission: Minimize the admission of root containers
- PoC2025-08-01k8s-seccomp-profile-set: Set appropriate seccomp profile
- PoC2025-08-01k8s-missing-network-policies: Check for Missing Network Policies in Kubernetes
- PoC2025-08-01k8s-netpol-egress-rules: Network policies define egress rules
- PoC2025-08-01k8s-netpol-namespace: Network Policies specify namespace
- PoC2025-08-01k8s-network-ingress-rules: Define network ingress rules
- PoC2025-08-01k8s-allow-privilege-escalation-set: Containers run with allowPrivilegeEscalation enabled
- PoC2025-08-01k8s-containers-share-host-ipc: Containers sharing host IPC namespace
- PoC2025-08-01k8s-host-network-namespace-shared: Host Network Namespace Sharing
- PoC2025-08-01k8s-host-pid-namespace-sharing: Host PID Namespace Sharing
- PoC2025-08-01k8s-readonly-fs: Enforce Read-Only Filesystem for Containers
- PoC2025-08-01k8s-readonly-rootfs: Pods with read-only root filesystem
- PoC2025-08-01k8s-root-user-id: Pods run with root user ID
- PoC2025-08-01k8s-role-pod-create: Roles that have pod create permissions
- PoC2025-08-01k8s-apiserver-token-auth-file: Detect kube-apiserver --token-auth-file usage
- PoC2025-08-01k8s-enc-prov-conf: Ensure that encryption providers are configured
- PoC2025-08-01k8s-etcd-cafile-set: Ensure etcd-cafile argument set
- PoC2025-08-01k8s-etcd-files-set: Ensure etcd cert and key set
- PoC2025-08-01k8s-svc-acct-issuer-set: Checks if service-account-issuer is correctly configured
- PoC2025-08-01k8s-svc-acct-key: Ensure service-account-key-file set
- PoC2025-08-01k8s-svc-acct-lookup-set: Ensure service-account-lookup set
- PoC2025-08-01k8s-tls-config-set: Ensure TLS config appropriately set
- PoC2025-08-01k8s-apiserver-anonymous-access: Ensure kube-apiserver --anonymous-auth is explicitly disabled