mirror of
https://github.com/aquasecurity/kube-hunter.git
synced 2026-08-20 12:46:25 +00:00
21 lines
883 B
Markdown
21 lines
883 B
Markdown
---
|
|
vid: KHV002
|
|
title: Kubernetes version disclosure
|
|
categories: [Information Disclosure]
|
|
---
|
|
|
|
# {{ page.vid }} - {{ page.title }}
|
|
|
|
## Issue description
|
|
|
|
The fact that your infrastructure is using Kubernetes, and the specific version of Kubernetes used is publicly available, and could be used by an attacker to target your environment with known vulnerabilities in the specific version of Kubernetes you are using.
|
|
This information could have been obtained from the Kubernetes API `/version` endpoint, or from the Kubelet's `/metrics` debug endpoint.
|
|
|
|
## Remediation
|
|
|
|
Disable `--enable-debugging-handlers` kubelet flag.
|
|
|
|
## References
|
|
|
|
- [kubelet server code](https://github.com/kubernetes/kubernetes/blob/4a6935b31fcc4d1498c977d90387e02b6b93288f/pkg/kubelet/server/server.go)
|
|
- [Kubelet - options](https://kubernetes.io/docs/reference/command-line-tools-reference/kubelet/#options) |