VDB
RHSA-2020%3A5194
RHSA-2020%3A5194
PUBLISHED
CVSS 6.400000095367432 MEDIUM
A flaw was found in the Kubernetes API server, where it allows an attacker to escalate their privileges from a compromised node. This flaw allows an attacker who can intercept requests on a compromised node, to redirect those requests, along with their credentials, to perform actions on other endpoints that trust those credentials (including other clusters), allowing for escalation of privileges. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.
Risk Scores
CVSS 3.1
6.400000095367432
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-kube-proxy@sha256:4292d25d8f99dc27a6a055d4acbd504143ea895e1de5da695d2ca9ae864b0272_s390x as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-kube-proxy@sha256:4292d25d8f99dc27a6a055d4acbd504143ea895e1de5da695d2ca9ae864b0272_s390x |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:ea9f084afc1d6466621b41858223e6f45482128245744b321eff3484c00925fb_s390x as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-cloud-credential-operator@sha256:ea9f084afc1d6466621b41858223e6f45482128245744b321eff3484c00925fb_s390x |
| Red Hat | openshift4/ose-operator-lifecycle-manager@sha256:eb4aebc4a7ab91bcf80d428fb54072cd10f45f8be0d2e462615d23c0d937bc58_amd64 as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-operator-lifecycle-manager@sha256:eb4aebc4a7ab91bcf80d428fb54072cd10f45f8be0d2e462615d23c0d937bc58_amd64 |
| Red Hat | openshift4/ose-ironic-ipa-downloader-rhel8@sha256:6c60c8ad25d1cc5ecc4f5354dea403253c288e4d8a01fd007aec9f50a76f46b5_ppc64le as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-ironic-ipa-downloader-rhel8@sha256:6c60c8ad25d1cc5ecc4f5354dea403253c288e4d8a01fd007aec9f50a76f46b5_ppc64le |
| Red Hat | openshift4/ose-ironic-rhel8@sha256:b4359f006502b5618bdfe1640e0dea7f535d7f55e5fc8c2ff95eac857e94c767_ppc64le as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-ironic-rhel8@sha256:b4359f006502b5618bdfe1640e0dea7f535d7f55e5fc8c2ff95eac857e94c767_ppc64le |
| Red Hat | openshift4/ose-k8s-prometheus-adapter@sha256:869edcbbf0bd468c0ea95e738226b42ffa6bdf86dc37834bbbd9fccff526ce4b_amd64 as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-k8s-prometheus-adapter@sha256:869edcbbf0bd468c0ea95e738226b42ffa6bdf86dc37834bbbd9fccff526ce4b_amd64 |
| Red Hat | openshift4/ose-kuryr-cni-rhel8@sha256:654b1ec6bb94b9f7fa56d941adf90feafc57a93cef7e5fa73906cee9d626caae_ppc64le as a component of Red Hat OpenShift Container Platform 4.5 | * |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:54f0415dfc020a541840628dd220ffff9843485fc305f25461ed9e610244f91c_s390x as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-cluster-image-registry-operator@sha256:54f0415dfc020a541840628dd220ffff9843485fc305f25461ed9e610244f91c_s390x |
| Red Hat | openshift4/ose-ironic-static-ip-manager-rhel8@sha256:0345f1c4653153fa89f7223493ecf3c14e311772ca355636eb771674b77ff661_ppc64le as a component of Red Hat OpenShift Container Platform 4.5 | * |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:b6a3d1e249f8cd18b72b8727cb504894f0b57c441aae649d38d08cc20ad89363_amd64 as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-cloud-credential-operator@sha256:b6a3d1e249f8cd18b72b8727cb504894f0b57c441aae649d38d08cc20ad89363_amd64 |
| Red Hat | openshift4/ose-ironic-hardware-inventory-recorder-rhel8@sha256:5762935bb3e356ee45dd798522aea781654fb7ac6f29cdb303218c00fde8a96c_amd64 as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-ironic-hardware-inventory-recorder-rhel8@sha256:5762935bb3e356ee45dd798522aea781654fb7ac6f29cdb303218c00fde8a96c_amd64 |
| Red Hat | openshift4/ose-operator-marketplace@sha256:aed628a3b561adc97549fb228a5632696ec664e9b5be64f28be265958ebe4017_ppc64le as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-operator-marketplace@sha256:aed628a3b561adc97549fb228a5632696ec664e9b5be64f28be265958ebe4017_ppc64le |
| Red Hat | openshift4/ose-tests@sha256:eb418a4ad09758a6b7d4a381f896e9398a0209fc5d7bc7ff48fa2b1e9f755031_ppc64le as a component of Red Hat OpenShift Container Platform 4.5 | * |
| Red Hat | openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:fdfaae82f53724c08da1387e6c17d588931d74e7db288863e569912dfd15becf_ppc64le as a component of Red Hat OpenShift Container Platform 4.5 | * |
| Red Hat | openshift4/ose-tests@sha256:1e7ef222423fab40af421655397abfffffcc335de41cee1175b41ae87e2f041a_amd64 as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-tests@sha256:1e7ef222423fab40af421655397abfffffcc335de41cee1175b41ae87e2f041a_amd64 |
| Red Hat | openshift4/ose-operator-lifecycle-manager@sha256:48790ca6f8eadbf4518d98476a49c3a44d38c95386377063a621b698a31ebf6d_s390x as a component of Red Hat OpenShift Container Platform 4.5 | * |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:16be80578b581cbfefd58d24cd91760fe358bfcea06304ba435b11976b504b48_ppc64le as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-cluster-image-registry-operator@sha256:16be80578b581cbfefd58d24cd91760fe358bfcea06304ba435b11976b504b48_ppc64le |
| Red Hat | openshift4/ose-console@sha256:480b6ca21ede0c02dc70f8eaa93192d140ab5d3e4db5e63ef54854205fd75500_s390x as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-console@sha256:480b6ca21ede0c02dc70f8eaa93192d140ab5d3e4db5e63ef54854205fd75500_s390x |
| Red Hat | openshift4/ose-tests@sha256:a7eab5a6b3594304d15fdaeac1ce5b39cf70629fe15de1028d96e3993af0107e_s390x as a component of Red Hat OpenShift Container Platform 4.5 | * |
| Red Hat | openshift4/ose-ironic-rhel8@sha256:8397ba8c706438b413a23b3856b09ebb9b576d93035de6399e82d9497088ce3f_amd64 as a component of Red Hat OpenShift Container Platform 4.5 | openshift4/ose-ironic-rhel8@sha256:8397ba8c706438b413a23b3856b09ebb9b576d93035de6399e82d9497088ce3f_amd64 |
…and 23 more
Timeline
- Dec 1, 2020 CVE Published
- Feb 23, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2020:5194 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1828858 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1851422 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1879017 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1880341 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1881542 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1883412 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1892372 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1894267 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1895856 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1897313 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1899563 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5194.json advisory
- https://access.redhat.com/security/cve/CVE-2020-8559 advisory
- https://www.cve.org/CVERecord?id=CVE-2020-8559 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-8559 advisory
- https://groups.google.com/g/kubernetes-security-announce/c/JAIGG5yNROs advisory