mirror of
https://github.com/aquasecurity/kube-hunter.git
synced 2026-08-23 22:26:23 +00:00
21 lines
648 B
Markdown
21 lines
648 B
Markdown
---
|
|
vid: KHV041
|
|
title: Exposed Port Forward
|
|
categories: [Remote Code Execution]
|
|
severity: high
|
|
---
|
|
|
|
# {{ page.vid }} - {{ page.title }}
|
|
|
|
## Issue description
|
|
|
|
An attacker could read and write data from a pod via the kubelet's `/portForward` endpoint. This endpoint is exposed as part of the kubelet's debug handlers.
|
|
|
|
## Remediation
|
|
|
|
Disable `--enable-debugging-handlers` kubelet flag.
|
|
|
|
## References
|
|
|
|
- [kubelet server code](https://github.com/kubernetes/kubernetes/blob/4a6935b31fcc4d1498c977d90387e02b6b93288f/pkg/kubelet/server/server.go)
|
|
- [Kubelet - options](https://kubernetes.io/docs/reference/command-line-tools-reference/kubelet/#options) |