Description
OpenKruise kruise-manager exposes an unauthenticated pprof endpoint, enabled by default, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any pod on the cluster network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenKruise | kruise-manager | < 1.9.2 | 1.9.2 |