References https://kubernetes.io/zh-cn/docs/reference/issues-security/security/ https://www.akamai.com/zh/blog/security-research/kubernetes-local-volumes-command-injection-vulnerability-rce-system-privileges https://www.redhat.com/zh-cn/topics/containers/kubernetes-security-best-practices https://more.suse.com/the_ultimate_guide_to_kubernetes_security_cn.html https://www.anquanke.com/post/id/257127 https://cloud.tencent.com/developer/article/2241819 https://zhuanlan.zhihu.com/p/157822389 https://github.com/neargle/re0-kubernetes-sec-archive https://kubernetes.io/zh-cn/docs/concepts/security/ https://kubernetes.io/zh-cn/docs/reference/issues-security/official-cve-feed/ https://www.wiz.io/academy/container-security/common-kubernetes-security-issues https://www.sentinelone.com/cybersecurity-101/cloud-security/kubernetes-security-issues/ https://cheatsheetseries.owasp.org/cheatsheets/Kubernetes_Security_Cheat_Sheet.html https://app.opencve.io/cve/?vendor=kubernetes https://www.cvedetails.com/vendor/15867/Kubernetes.html
Related VulnerabilitiesKubernetes Dashboard /api/v1/namespaces/kube-system/secrets/kubernetes-dashboard-certs 权限绕过漏洞(CVE-2018-18264)kubernetes-metrics信息泄露漏洞PoCheadlamp-panel: Headlamp Kubernetes UI Panel - DetectPoCCVE-2019-11253: Kubernetes API Server - YAML Parsing DoS (Billion Laughs)PoCCVE-2018-18264: Kubernetes Dashboard <1.10.1 - Authentication BypassPoCkubernetes-dashboard-enabled: Kubernetes Dashboard for ACK Clusters - EnabledPoCeks-cluster-logging: Kubernetes Cluster LoggingPoCeks-kubernetes-secrets-encryption: EKS Kubernetes Secrets not EncryptedPoCeks-logging-kubes-api-calls: Enable CloudTrail Logging for Kubernetes API CallsPoCazure-aks-api-version-not-latest: Azure AKS Kubernetes API Version Not LatestPoCazure-aks-kubernetes-version-outdated: Azure AKS Kubernetes Version Not LatestPoCkubernetes-metrics: Detect Kubernetes Exposed MetricsPoCkubernetes-unauth: kubernetes Unauth