CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:HCVE-2021-25735
Medium (6.5) in kubernetes kubernetes. EPSS 5.4% chance of exploitation in the next 30 days. Fixed in k8s.io/kubernetes 1.18.18, 1.19.10, 1.20.6.
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
Severity
- EPSS
- 5.4% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- CWE
- CWE-372
- Published
- Modified
- Record from
- the NVD, synced
Affected
- kubernetes:kubernetes
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-g42g-737j-qx6j | Go | k8s.io/kubernetes | >=1.20.0 <1.20.6 | 1.20.6 |
| GHSA-g42g-737j-qx6j | Go | k8s.io/kubernetes | >=1.19.0 <1.19.10 | 1.19.10 |
| GHSA-g42g-737j-qx6j | Go | k8s.io/kubernetes | <1.18.18 | 1.18.18 |
| GO-2022-0907 | Go | k8s.io/kubernetes | <1.18.18 >=1.19.0 <1.19.10 >=1.20.0 <1.20.6 | 1.18.18, 1.19.10, 1.20.6 |