Skip to content
OpenAdvisories

Weakness (CWE)

CWE-372: Incomplete Internal State Distinction

Class Draft Mapping discouraged

The product does not properly determine which state it is in, causing it to assume it is in state X when in fact it is in state Y, causing it to perform incorrect operations in a security-relevant manner.

Source: MITRE CWE-372

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2021-25735 Public exploit

    Validating Admission Webhook does not observe some previous fields

    A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at leas…

    Kubernetes Kubernetes kubernetes k8s.io/kubernetes Debian Alpine Go