CVE:CVE-2020-8554
CNNVD:CNNVD-202012-433
Kubernetes是美国Linux基金会的一套开源的Docker容器集群管理系统。该系统为容器化的应用提供资源调度、部署运行、服务发现和扩容缩容等功能。
Kubernetes 存在安全漏洞，攻击者可利用该漏洞可以通过Kubernetes上的LoadBalancer ExternalIP充当中间人，以便在会话中读取或写入数据。
solution:Upgrade kubernetes kubernetes to a higher version than *; Upgrade oracle communications_cloud_native_core_network_slice_selection_function to a higher version than 1.2.1,and avoid the version 1.2.1; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.15.0,and avoid the version 1.15.0; Upgrade oracle communications_cloud_native_core_service_communication_proxy to a higher version than 1.14.0,and avoid the version 1.14.0