github/kube-hunter
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-hunter.git synced 2026-05-06 17:28:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #100 from idanr1986/cve_hunter

Browse Source 
changed cve details
This commit is contained in:
Liz Rice
2019-03-04 15:40:12 +00:00
committed by GitHub
parent a3b4e8243c b7222d26e7
commit 5b8fd07714
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/modules/hunting/cvehunter.py
View File

@@ -22,10 +22,10 @@ class ServerApiVersionEndPointAccessPE(Vulnerability, Event):
class ServerApiVersionEndPointAccessDos(Vulnerability, Event):
"""Node is vulnerable to critical CVE-2019-1002100"""
"""Node not patched for CVE-2019-1002100. Depending on your RBAC settings, a crafted json-patch could cause a Denial of Service."""
def __init__(self, evidence):
Vulnerability.__init__(self, KubernetesCluster, name="Medium Denial of Service CVE", category=DenialOfService)
Vulnerability.__init__(self, KubernetesCluster, name="Denial of Service to Kubernetes API Server", category=DenialOfService)
self.evidence = evidence