CVE-2021-25735 — Validating Admission Webhook does not observe some previous fields
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if the…
Published: 2021-09-06 · CVSS: 6.5 · CVSS 3.1
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7