Files
kube-hunter/docs/_kb/KHV043.md
Liz Rice 4c82b68f48 Merges #225 (#278)
* Fix typos

* Fix review comments
2019-11-26 21:11:33 +02:00

665 B

vid, title, categories
vid title categories
KHV043 Cluster Health Disclosure
Information Disclosure

{{ page.vid }} - {{ page.title }}

Issue description

The kubelet is leaking it's health information, which may contain sensitive information, via the /healthz endpoint. This endpoint is exposed as part of the kubelet's debug handlers.

Remediation

Disable --enable-debugging-handlers kubelet flag.

References