mirror of
https://github.com/aquasecurity/kube-hunter.git
synced 2026-08-23 22:26:23 +00:00
22 lines
796 B
Markdown
22 lines
796 B
Markdown
---
|
|
vid: KHV049
|
|
title: kubectl proxy Exposed
|
|
categories: [Information Disclosure]
|
|
severity: high
|
|
---
|
|
|
|
# {{ page.vid }} - {{ page.title }}
|
|
|
|
## Issue description
|
|
|
|
An open kubectl proxy was detected. `kubectl proxy` is a convenient tool to connect from a local machine into an application running in Kubernetes or to the Kubernetes API. This is common practice to browse for example the Kubernetes dashboard. Leaving an open proxy can be exploited by an attacker to gain access into your entire cluster.
|
|
|
|
## Remediation
|
|
|
|
Expose your applications in a permanent, legitimate way, such as via Ingress.
|
|
|
|
Close open proxies immediately after use.
|
|
|
|
## References
|
|
|
|
- [Accessing Clusters - Using kubectl proxy](https://kubernetes.io/docs/tasks/access-application-cluster/access-cluster/#using-kubectl-proxy) |