Addressing the Kubernetes dashboard and external IP proxying vulnerabilities



  • Kubernetes announced two patches to address recently discovered security vulnerabilities for both Kubernetes and the Kubernetes dashboard. For more details of the announcements, see the Security Impact of Kubernetes API server external IP address proxying and Security release of dashboard v1.10.1 - CVE-2018-18264. Let’s take a deeper dive into each one and how they can affect your Rancher deployments. Accessing custom TLS certs via the kubernetes dashboard The Kubernetes dashboard vulnerability (CVE-2018-18264) affects dashboard version v1.

    https://rancher.com/blog/2019/2019-01-04-kubernetes-dashboard-external-ip-proxying-vulnerabilities/

Log in to reply
 

© Lightnetics 2024