Researchers have uncovered the first known security flaw in Kubernetes, a popular open-source tool for managing application workloads. Developers published three security updates this week that promised to protect users of Kubernetes, a containerized application system, from a new vulnerability that could make it possible for hackers to inject malicious code or bring down an app from behind an organization’s firewall. Kubernetes runs on top of operating systems, taking commands from an administrator or developer and passing those instructions to nodes throughout an environment. This bug, the first major issue found in Kubernetes, warranted a 9.8 out of 10 severity score on because it could allow outsiders to establish a connection through Kubernetes’ trusted-application program interface to backend servers, ZDNet reported. From there, hackers can use that authentication to send arbitrary or malicious requests disguised under valid Kubernetes credentials, using that access to gain full administrator privileges. Exploiting the flaw […]
The post First major Kubernetes flaw enables hackers to access backend servers undetected appeared first on Cyberscoop.
Continue reading First major Kubernetes flaw enables hackers to access backend servers undetected→