Logo

Kube-hunter hunts for security weaknesses in Kubernetes clusters

View the Project on GitHub aquasecurity/kube-hunter

Lookup Vulnerability
All vulnerabilies

KHV045 - Exposed System Logs

Issue description

The kubelet is leaking system logs via the /logs endpoint. This endpoint is exposed as part of the kubelet’s debug handlers.

Remediation

Disable --enable-debugging-handlers kubelet flag.

References