3 ms·

CVE:Proxy request handling in kube-apiserver can leave vulnerabl TCP connections

• kerng 8y ago
  >>In default configurations, all users (authenticated and unauthenticated) are allowed to perform discovery API calls that allow this escalation. Sounds very serious. So an unauthenticated user can take over as root basically? Wow.