CVE-2025-46599 - CERT CVE
ID CVE-2025-46599
Sažetak CNCF K3s 1.32 before 1.32.4-rc1+k3s1 has a Kubernetes kubelet configuration change with the unintended consequence that, in some situations, ReadOnlyPort is set to 10255. For example, the default behavior of a K3s online installation might allow unauthenticated access to this port, exposing credentials.
Reference
CVSS
Base: 6.8
Impact: 4.0
Exploitability:2.2
Pristup
VektorSloženostAutentikacija
NETWORK HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
HIGH NONE NONE
CVSS vektor CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Zadnje važnije ažuriranje 29-04-2025 - 13:52
Objavljeno 25-04-2025 - 05:15