Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Kubeview Project Subscribe
Filtered by product Kubeview
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-45933 1 Kubeview Project 1 Kubeview 2022-12-01 N/A 9.8 CRITICAL
KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does not require authentication, and retrieves certificate files that can be used for authentication as kube-admin. NOTE: the vendor's position is that KubeView was a "fun side project and a learning exercise," and not "very secure."