Detecting the ExternalIPs Kubernetes vulnerability in code
ID: 02dac844-64a4-5fb1-95b1-2b858c3e35eb
STIX ID: report--02dac844-64a4-5fb1-95b1-2b858c3e35eb
Feed Name: Snyk Blog
Threat Score
Snyk warns about Kubernetes CVE-2020-8554, an unpatchable vulnerability that can allow traffic interception when Services use externalIPs. Snyk IaC now includes a rule to detect externalIP usage and recommends removing or restricting externalIPs (especially in multi-tenant clusters) and using admission controllers or OPA Gatekeeper as mitigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.