Azure Kubernetes Service: Privilege escalation from compromised node to cluster (CVE-2020-8559)

Microsoft announced general availability of this Azure Kubernetes Service (AKS) update in September 2020.

1 version

Facts

Microsoft id
azure-kubernetes-service-privilege-escalation-from-compromised-node-to-cluster-cve20208559
Products
Azure Kubernetes Service (AKS)
Update type
Security
Product categories
Compute, Containers
General availability
September 2020
Status pages
Azure Kubernetes Service (AKS) status
First captured by us
(from our first import of this list)
Microsoft last modified
Source
Azure Updates · open the original at Microsoft

Microsoft says

If an attacker is able to intercept certain requests to the Kubelet within Azure Kubernetes Service (AKS), they can send a redirect response that may…

Azure Updates,

Read Microsoft's full post

What Microsoft changed

One version so far. If Microsoft edits it, each change shows here with what was removed and added.

  1. First version we captured ·

    The text as we first saw it

    Seen by us · Microsoft's timestamp · Microsoft's page

Other changes for Azure Kubernetes Service (AKS)

Last updated