CVE-2021-25743

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 06-01-2022 01:00

Last modified: - 06-01-2022 01:00

Total changes: - 1

Description

CVE-2021-25743 kubernetes: kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N

High

Attack complexity

Network

Attack vector

None

Availability

None

Confidentiality

Low

Integrity

Low

Privileges required

Changed

Scope

Required

User interaction

3.0

Base score

Exploitability score

Impact score

Verification logic

AND

product=rhacm2/agent-service-rhel8 AND version=

vendor=Red Hat Enterprise Linux AND product=acm AND version=2

AND

product=kubernetes AND version=

vendor=Red Hat Enterprise Linux AND product=ansible_automation_platform

AND

product=kubernetes AND version=

vendor=Red Hat Enterprise Linux AND product=ansible_tower AND version=3

AND

product=atomic-openshift AND version=

vendor=Red Hat Enterprise Linux AND product=openshift AND version=3.11

AND

product=openshift AND version=

vendor=Red Hat Enterprise Linux AND product=openshift AND version=4

AND

product=openshift-clients AND version=

vendor=Red Hat Enterprise Linux AND product=openshift AND version=4

Reference

Keywords

CVE-2021-25743

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

REDHAT

CVE-2021-25743

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures