All articles

• KHV002 - Kubernetes version disclosure

• KHV003 - Azure Metadata Exposure

• KHV004 - Azure SPN Exposure

• KHV005 - Access to Kubernetes API

• KHV006 - Insecure (HTTP) access to Kubernetes API

• KHV007 - Specific Access to Kubernetes API

• KHV020 - Possible Arp Spoof

• KHV021 - Certificate Includes Email Address

• KHV022 - Critical Privilege Escalation CVE

• KHV023 - Denial of Service to Kubernetes API Server

• KHV024 - Possible Ping Flood Attack

• KHV025 - Possible Reset Flood Attack

• KHV026 - Arbitrary Access To Cluster Scoped Resources

• KHV027 - Kubectl Vulnerable To CVE-2019-11246

• KHV028 - Kubectl Vulnerable To CVE-2019-1002101

• KHV029 - Dashboard Exposed

• KHV030 - Possible DNS Spoof

• KHV031 - Etcd Remote Write Access Event

• KHV032 - Etcd Remote Read Access Event

• KHV033 - Etcd Remote version disclosure

• KHV034 - Etcd is accessible using insecure connection (HTTP)

• KHV036 - Anonymous Authentication

• KHV037 - Exposed Container Logs

• KHV038 - Exposed Running Pods

• KHV039 - Exposed Exec On Container

• KHV040 - Exposed Run Inside Container

• KHV041 - Exposed Port Forward

• KHV042 - Exposed Attaching To Container

• KHV043 - Cluster Health Disclosure

• KHV044 - Privileged Container

• KHV045 - Exposed System Logs

• KHV046 - Exposed Kubelet Cmdline

• KHV047 - Pod With Mount To /var/log

• KHV049 - kubectl proxy Exposed

• KHV050 - Read access to Pod service account token

• KHV051 - Exposed Existing Privileged Containers Via Secure Kubelet Port

• KHV052 - Exposed Pods

• KHV053 - AWS Metadata Exposure