CVE-2020-8559: kubernetes Open Redirect

CVSS: 6.8v3.1MediumModified

AliasesRHSA-2021:0030UBUNTU-CVE-2020-8559DEBIAN-CVE-2020-8559+444 more

Published 22-07-2020Last modified 16-09-2024

Vulnerability summary

CVE-2020-8559 is a medium (CVSS 6.8) Open Redirect vulnerability in kubernetes. EPSS estimates a 6.10% chance of exploitation in the next 30 days, higher than 93.3% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

38/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v3.1 (NVD)

EPSS score

6.10%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2github, reference

Advisory lineage

Upstream 0 · Downstream 2 · Related 165

RHBA-2020:4197 RHSA-2020:5363 CGA-24JR-C2WR-V9V4 CGA-27J2-FR8H-M4RR CGA-29GV-V4FF-2FHG CGA-2CG3-WP54-V4WJ+94 more

Showing 100 of 167. Use Open JSON for the complete list.

Timeline

22-07-2020
PublishedVulnerability first disclosed.
16-09-2024
Last modifiedVulnerability information updated.

Description

The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise.

CVSS metrics

9 scores · 8 sources · 2 versions

v3.16.8v2.06.0

EPSS trend

Probability

6.10%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 6.10% on 20-09-2026

20-09-202620-10-2026

EPSS score

6.10%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

githubUnverified
Kubernetes
Maturity: poc
referenceUnverified
Exploit Reference (groups.google.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-601URL Redirection to Untrusted Site ('Open Redirect')The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

Affected systems

Chainguard200 products

actions-runner-controller-fips< 0.10.1-r6
actions-runner-controller-fips-compat< 0.10.1-r6
addon-resizer-fips< 1.8.23-r3
addon-resizer-fips-compat< 1.8.23-r3
argo-workflows-fips< 3.6.5-r2

aws-efs-csi-driver-fips< 2.1.7-r0
aws-load-balancer-controller-fips< 2.12.0-r1
azure-aad-pod-identity-mic< 1.8.17-r20
azure-aad-pod-identity-nmi< 1.8.17-r20
bank-vaults-fips< 1.20.4-r24
bank-vaults-template-fips< 1.20.4-r24
cass-operator-compat-fips< 1.23.2-r0
cass-operator-fips< 1.23.2-r0
cass-operator-fips-no-pvc-delete< 1.23.2-r0
cass-operator-fips-no-pvc-delete-compat< 1.23.2-r0
cert-exporter< 2.14.0-r9
cert-exporter-fips< 2.14.0-r9
cert-manager-webhook-pdns-fips< 2.5.2-r3
cilium-cli< 0.18.2-r2
cosign-fips< 2.4.3-r5
dynamic-localpv-provisioner-fips< 4.2.0-r4
eksctl< 0.205.0-r4
external-secrets-fips< 0.15.0-r0
falcoctl< 0.7.3-r8
falcoctl-fips< 0.11.0-r6
falcoctl-fips-0.4< 0.4.0-r18
falcosidekick-fips< 2.31.1-r5
fulcio-fips< 1.6.6-r6
ghaudit< 0.4.0-r1
glab< 1.54.0-r0
grafana-operator-fips< 5.17.0-r1
harbor-2.9-portal-nginx-config< 2.9.5-r13
helm-fips< 3.17.2-r1
helm-fips-3< 3.19.2-r0
helm-fips-4< 4.0.1-r1
helm-operator< 1.39.2-r0
helm-operator-compat< 1.39.2-r0
helm-operator-fips< 1.39.2-r0
helm-operator-fips-compat< 1.39.2-r0
hubble< 1.17.1-r2
hubble-compat< 1.17.1-r2
hubble-fips< 1.17.1-r2
hubble-fips-compat< 1.17.1-r2
hubble-ui-backend-fips< 0.13.2-r2
k8ssandra-operator-fips< 1.21.1-r2
k8ssandra-operator-fips-compat< 1.21.1-r2
karpenter-0.35< 0.35.12-r3
karpenter-fips-0.35< 0.35.12-r3
karpenter-fips-0.36< 0.36.9-r3
kiam< 4.2-r22
kiam-compat< 4.2-r22
kine< 0.13.11-r0
ko-fips< 0.17.1-r10
kots< 1.124.8-r0
kots-compat< 1.124.8-r0
kots-symlink-compat< 1.124.8-r0
kube-bench-configs-fips< 0.10.4-r2
kube-bench-fips< 0.10.4-r2
kube-logging-logging-operator-3.17< 3.17.11-r21
kube-logging-logging-operator-3.17-compat< 3.17.11-r21
kube-logging-logging-operator-4.1< 4.1.0-r17
kube-logging-logging-operator-4.1-compat< 4.1.0-r17
kube-oidc-proxy< 1.0.9-r7
kube-rbac-proxy-fips< 0.19.0-r3
kube-state-metrics-2.6< 2.6.0-r24
kube-state-metrics-fips< 2.15.0-r6
kube-state-metrics-fips-iamguarded-compat< 2.15.0-r6
kubeflow-access-managementAll versions (No fix recorded)
kubeflow-access-management-fipsAll versions (No fix recorded)
kubeflow-pipelines-apiserver< 2.14.3-r3
kubernetes-csi-livenessprobe-2.10< 2.10.0-r17
kubernetes-csi-livenessprobe-fips< 2.15.0-r4
kubernetes-csi-livenessprobe-fips-2.10< 2.10.0-r19
kubernetes-dashboard< 7.11.1-r1
kubernetes-dashboard-fips< 7.11.1-r1
kubernetes-dashboard-metrics-scraper< 1.2.2-r5
kubernetes-dashboard-metrics-scraper-compat< 1.2.2-r5
kubernetes-dashboard-metrics-scraper-fips< 1.2.2-r4
kubernetes-dns-node-cache< 1.25.0-r5
kubernetes-secret-generator< 3.4.1-r1
kubernetes-secret-generator-compat< 3.4.1-r1
kubevela< 1.10.2-r4
kubevela-vela-cli< 1.10.2-r4
kubevela-vela-core< 1.10.2-r4
kubevela-vela-core-compat< 1.10.2-r4
kubewatch< 2.9.0-r7
kwok< 0.6.1-r7
kwokctl< 0.6.1-r7
kyverno-policy-reporter< 3.0.7-r1
kyverno-policy-reporter-compat< 3.0.7-r1
local-path-provisioner< 0.0.31-r3
local-static-provisioner< 2.7.0-r15
local-static-provisioner-compat< 2.7.0-r15
local-volume-node-cleanup< 2.7.0-r15
local-volume-node-cleanup-compat< 2.7.0-r15
melange< 0.23.0-r1
metallb-controller-compat-fips< 0.14.9-r5
metallb-controller-fips< 0.14.9-r5
metallb-cp-tool-compat-fips< 0.14.9-r5
metallb-cp-tool-fips< 0.14.9-r5
metallb-fips< 0.14.9-r5
metallb-frr-compat-fips< 0.14.9-r5
metallb-frr-fips< 0.14.9-r5
metallb-speaker-compat-fips< 0.14.9-r5
metallb-speaker-fips< 0.14.9-r5
metrics-server-fips< 0.7.2-r11
multus-cni-fips< 4.1.4-r6
newrelic-infra-operator< 0.21.6-r3
newrelic-nri-kube-events< 2.11.8-r1
newrelic-nri-statsd< 2.11.0-r0
nfs-subdir-external-provisioner-fips< 4.0.18-r20
nodetaint< 0.0.4-r30
nri-discovery-kubernetes< 1.11.0-r0
nri-discovery-kubernetes-compat< 1.11.0-r0
nri-kubernetes< 3.35.0-r0
opentelemetry-collector-contrib< 0.122.0-r1
opentelemetry-collector-contrib-compat< 0.122.0-r1
opentelemetry-collector-contrib-fips< 0.121.0-r2
policy-controller-fips< 0.12.0-r7
policy-controller-tester-fips< 0.12.0-r7
postgres-operator< 1.14.0-r5
postgres-operator-compat< 1.14.0-r5
postgres-operator-fips< 1.14.0-r5
postgres-operator-fips-compat< 1.14.0-r5
prometheus-2.51< 2.51.2-r48
prometheus-adapter< 0.12.0-r10
prometheus-adapter-0.10< 0.10.1-r19
prometheus-adapter-fips< 0.12.0-r11
prometheus-adapter-fips-0.10< 0.10.1-r19
prometheus-admission-webhook-fips< 0.81.0-r1
prometheus-config-reloader-fips< 0.81.0-r1
prometheus-operator-fips< 0.81.0-r1
prometheus-operator-fips-iamguarded-compat< 0.81.0-r1
pulumi-kubernetes-operator< 1.16.0-r13
rabbitmq-cluster-operator< 2.12.1-r3
rabbitmq-cluster-operator-compat< 2.12.1-r3
rabbitmq-cluster-operator-iamguarded-compat< 2.12.1-r3
rabbitmq-messaging-topology-operator< 1.16.0-r4
rabbitmq-messaging-topology-operator-compat< 1.16.0-r4
rabbitmq-messaging-topology-operator-iamguarded-compat< 1.16.0-r4
request-1279< 1.21.1-r2
request-1279-compat< 1.21.1-r2
secrets-store-csi-driver-provider-aws< 0.3.11-r32
secrets-store-csi-driver-provider-azure< 1.6.2-r32
sigstore-scaffolding-fips< 0.7.21-r2
sigstore-scaffolding-fips-cloudsqlproxy< 0.7.21-r2
sigstore-scaffolding-fips-ctlog-createctconfig< 0.7.21-r2
sigstore-scaffolding-fips-ctlog-managectroots< 0.7.21-r2
sigstore-scaffolding-fips-ctlog-verifyfulcio< 0.7.21-r2
sigstore-scaffolding-fips-fulcio-createcerts< 0.7.21-r2
sigstore-scaffolding-fips-getoidctoken< 0.7.21-r2
sigstore-scaffolding-fips-rekor-createsecret< 0.7.21-r2
sigstore-scaffolding-fips-trillian-createdb< 0.7.21-r2
sigstore-scaffolding-fips-trillian-createtree< 0.7.21-r2
sigstore-scaffolding-fips-trillian-updatetree< 0.7.21-r2
sigstore-scaffolding-fips-tsa-createcertchain< 0.7.21-r2
sigstore-scaffolding-fips-tuf-createsecret< 0.7.21-r2
sigstore-scaffolding-fips-tuf-server< 0.7.21-r2
skaffold< 2.14.2-r0
slsa-verifier< 2.7.0-r3
sonobuoy< 0.57.3-r2
sonobuoy-compat< 0.57.3-r2
spark-operator< 2.1.0-r8
spark-operator-oci-entrypoint< 2.1.0-r8
spire-agent< 1.11.2-r5
spire-agent-fips< 1.12.0-r0
spire-oidc-discovery-provider< 1.11.2-r5
spire-oidc-discovery-provider-fips< 1.12.0-r0
spire-server< 1.11.2-r5
spire-server-fips< 1.12.0-r0
src< 6.1.0-r3
stakater-reloader< 1.3.0-r2
stakater-reloader-0.0.119< 0.0.119-r18
stakater-reloader-0.0.128< 0.0.128-r17
stakater-reloader-compat< 1.3.0-r2
stakater-reloader-compat-0.0.119< 0.0.119-r18
stakater-reloader-compat-0.0.128< 0.0.128-r17
step-issuer< 0.9.8-r0
step-issuer-compat< 0.9.8-r0
step-issuer-fips< 0.9.8-r0
step-issuer-fips-compat< 0.9.8-r0
stern< 1.32.0-r3
tekton-chains< 0.24.0-r5
tekton-chains-fips< 0.24.0-r5
terraform< 1.5.7-r25
terraform-compat< 1.5.7-r25
terraform-local-provider-config< 1.5.7-r25
thanos-fips< 0.37.2-r7
thanos-fips-iamguarded-compat< 0.37.2-r7
thanos-operator-compat< 0.3.7-r26
thanos-operator-fips< 0.3.7-r26
thanos-operator-fips-compat< 0.3.7-r26
tigera-operator-1.28< 1.28.15-r19
tigera-operator-1.29< 1.29.8-r19
tigera-operator-fips-1.29< 1.29.8-r19
tkn< 0.40.0-r4
tkn-fips< 0.40.0-r4
trust-manager< 0.16.0-r2
trust-manager-fips< 0.16.0-r3
upAll versions (No fix recorded)

Show all 200

1 vendor · 200 products · Showing 200 of 313. Use Open JSON for the complete list.

References

20 links

groups.google.com/d/msg/kubernetes-security-announce/JAIGG5yNROs/19nHQ5wkBwAJX Refsource MISCEVIDENCEWEBExploitThird Party Advisory
github.com/kubernetes/kubernetes/issues/92914X Refsource MISCFIXWEBExploitIssue TrackingPatchThird Party Advisory
security.netapp.com/advisory/ntap-20200810-0004/X Refsource CONFIRMAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2021:0030Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1851422REPORTWEB
bugzilla.redhat.com/show_bug.cgi?id=1913234REPORT
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0030.jsonAdvisory
access.redhat.com/security/cve/CVE-2020-8559REPORT
www.cve.org/CVERecord?id=CVE-2020-8559AdvisoryREPORT

Show all 20 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities