UpHeron
All vulnerabilities

Servers and applications

CVE-2020-8559

The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise.

Severity
Medium 6.8
Published
22 Jul 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.16.13, 1.17.9, 1.18.6
Sources
NVD

Affected software

SoftwareAffected versions
KubernetesServers and applications · cpe:a:kubernetes:kubernetes
  • From 1.6.0 up to 1.15.0
  • From 1.16.0 before 1.16.13
  • From 1.17.0 before 1.17.9
  • From 1.18.0 before 1.18.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-8559
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-8559