QwikSec

Security Database

CVE

CWE

Training

CVE-2020-8561

Published: Sep 20, 2021

Modified: Jun 1, 2026

PUBLISHED

CVSS v3.1

4.1

MEDIUM

Description

A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs when the log level is set to 10, they can view the redirected responses and headers in the logs.

Vendor	Product	Versions
Kubernetes	Kubernetes	affected `0 - < *`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

None

Availability

None

References

https://kubernetes.io/blog/2026/05/26/reconciling-unfixed-kubernetes-cves/

x_refsource_MISC

https://groups.google.com/g/kubernetes-security-announce/c/RV2IhwcrQsY

x_refsource_MISC

https://github.com/kubernetes/kubernetes/issues/104720

x_refsource_MISC

https://security.netapp.com/advisory/ntap-20211014-0002/

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.