kube-hunter/docs/_kb/KHV003.md

vid, title, categories

vid	title	categories
KHV003	Azure Metadata Exposure	Information Disclosure

{{ page.vid }} - {{ page.title }}

Issue description

Microsoft Azure provides an internal HTTP endpoint that exposes information from the cloud platform to workloads running in a VM. The endpoint is accessible to every workload running in the VM. An attacker that is able to execute a pod in the cluster may be able to query the metadata service and discover additional information about the environment.

Remediation

Starting in the 2020.10.15 Azure VHD Release, AKS restricts the pod CIDR access to that internal HTTP endpoint.

CVE-2021-27075

References

• Azure Instance Metadata service
• AAD Pod Identity