Security Advisory

CVE-2021-25737

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-09-06 11:32:01

Last updated 2024-09-16 21:04:34

Assigner kubernetes

CVSS score 2.7

State PUBLISHED

Description

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

← Browse all CVEs View on cve.org ↗