Affected by GO-2022-0617 and 12 other vulnerabilities

GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

GO-2022-0907: Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

GO-2022-0908: Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

GO-2023-2159: Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes

GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

GO-2024-2755: Sensitive Information leak via Log File in Kubernetes in k8s.io/kubernetes

GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

auth

package

v1.18.17 Latest Latest Go to latest Published: Mar 18, 2021 License: Apache-2.0 Imports: 0 Imported by: 0

Details

Package auth contains implementations for interfaces in the pkg/auth package

Path	Synopsis
authenticator
token/bootstrap Package bootstrap provides a token authenticator for TLS bootstrap secrets.	Package bootstrap provides a token authenticator for TLS bootstrap secrets.
authorizer Package authorizer contains implementations for pkg/auth/authorizer interfaces	Package authorizer contains implementations for pkg/auth/authorizer interfaces
node
rbac Package rbac implements the authorizer.Authorizer interface using roles base access control.	Package rbac implements the authorizer.Authorizer interface using roles base access control.
rbac/bootstrappolicy