CVE-2020-10749CWE-300

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to…

Medium · published June 3, 2020

CVSS v3.1
6.0
EPSS
2%
Percentile
81.4
In the wild
Unconfirmed
What it is

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.02087 · 81.4th percentile
Weakness
CWE-300 · Channel Accessible by Non-Endpoint
Published
2020-06-03T13:45Z
EPSS history
Timeline
  • 03 JUN 13:45Z
    A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to…
    cvelistv5