关联漏洞
标题：
Kubernetes 安全漏洞
(CVE-2020-8554)
描述：Kubernetes是美国Linux基金会的一套开源的Docker容器集群管理系统。该系统为容器化的应用提供资源调度、部署运行、服务发现和扩容缩容等功能。 Kubernetes 存在安全漏洞，攻击者可利用该漏洞可以通过Kubernetes上的LoadBalancer ExternalIP充当中间人，以便在会话中读取或写入数据。
描述
Prisma Cloud Compute Admission rules to mitigate Kubernetes CVE-2020-8554
介绍
# Prisma Cloud Compute Mitigations for Kubernetes CVE-2020-8554
This repository contains Prisma Cloud Compute Admission rules that mitigate exploitation of CVE-2020-8554, an unpatched Kubernetes vulnerability. To ensure correct usage, please follow the instructions provided in the 'Prisma Cloud Mitigation' section of our response post, [Protecting Against Kubernetes CVE-2020-8554](https://unit42.paloaltonetworks.com/).
## Kubernetes CVE-2020-8554
Kubernetes CVE-2020-8554 is a design flaw allowing services to intercept cluster traffic to certain IPs, by setting their `.spec.exteralIPs` or `.status.loadBalancer.ingress[].ip` fields to those IPs. Non-admin users that can create or update services, or patch services' status, can exploit the vulnerability to perform [Man-in-The-Middle](https://attack.mitre.org/techniques/T1557/) attacks against pods and nodes in the cluster in an attempt to escalate their privileges.
## Further Reading
For more information, refer to [Protecting Against Kubernetes CVE-2020-8554](https://unit42.paloaltonetworks.com/).
文件快照
[4.0K] /data/pocs/5418c5015e2d6c21c9e021a0f332a65bef93793d
├── [ 994] PrismaExternalIPs.json
├── [ 941] PrismaLoadBalancerIPs.json
└── [1.0K] README.md
0 directories, 3 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。