Description
A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kubernetes | ingress-nginx | 1.11.0 – < 1.11.2, < 1.10.4 | 1.11.2 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 2 repositories
-
dovics/cve-2024-7646 ★ 1 · Sep 25, 2024
PoC CVE-2024-7646
-
r0binak/CVE-2024-7646 ★ 0 · Aug 29, 2024
PoC CVE-2024-7646
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/kubernetes/ingress-nginx | all versions | — | GO-2024-3075 |
Advisories 2
- WID-SEC-2024-1876 Kubernetes: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Oct 29, 2024
- NCSC-2024-0349 Kwetsbaarheid verholpen in Kubernetes NCSC-NL (Netherlands) · Aug 19, 2024