Exploiting and detecting CVE-2021-25735: Kubernetes validating admission webhook bypass
The CVE-2021-25735 medium-level vulnerability has been found in Kubernetes kube-apiserver that could bypass a Validating Admission Webhook and allow unauthorised node updates.
The kube-apiserver affected are:
kube-apiserver v1.20.0 to v1.20.5
kube-...
blogs.sretribe.net6 min read