mirror of
https://github.com/aquasecurity/kube-hunter.git
synced 2026-08-22 13:46:29 +00:00
21 lines
781 B
Markdown
21 lines
781 B
Markdown
---
|
|
vid: KHV049
|
|
title: kubectl proxy Exposed
|
|
categories: [Information Disclosure]
|
|
---
|
|
|
|
# {{ page.vid }} - {{ page.title }}
|
|
|
|
## Issue description
|
|
|
|
An open kubectl proxy was detected. `kubectl proxy` is a convenient tool to connect from a local machine into an application running in Kubernetes or to the Kubernetes API. This is common practice to browse for example the Kubernetes dashboard. Leaving an open proxy can be exploited by an attacker to gain access into your entire cluster.
|
|
|
|
## Remediation
|
|
|
|
Expose your applications in a permanent, legitimate way, such as via Ingress.
|
|
|
|
Close open proxies immediately after use.
|
|
|
|
## References
|
|
|
|
- [Accessing Clusters - Using kubectl proxy](https://kubernetes.io/docs/tasks/access-application-cluster/access-cluster/#using-kubectl-proxy) |