Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-25735

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.185
EPSS Ranking 94.9%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 5.5
Products affected by CVE-2021-25735


Contact Us

Shodan ® - All rights reserved