CVE-2020-8570 Kubernetes Java client libraries unvalidated path traversal in Copy implementation
Attackers can overwrite arbitrary files on the host system by exploiting path traversal in the Kubernetes Java client library during file copy operations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-8570?
CVE-2020-8570 is a critical path traversal vulnerability in Kubernetes Java Client, published on 21 Jan 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executing the client code.
Which versions are affected by CVE-2020-8570?
4 open source packages ship an affected version, including io.kubernetes:client-java. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
io.kubernetes:client-java Maven | All versions | 9.0.2 |
io.kubernetes:client-java Maven | All versions | 9.0.2 |
io.kubernetes:client-java Maven | From 10.0.0 | 10.0.1 |
io.kubernetes:client-java Maven | From 10.0.0 | 10.0.1 |
Products include Kubernetes Java.
How do I fix CVE-2020-8570?
Upgrade io.kubernetes:client-java to a fixed version for your release line: 9.0.2 or 10.0.1.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2020-8570 being exploited?
There is no known exploitation of CVE-2020-8570 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Kubernetes Java Client
Sources
Also known as GHSA-cghx-9gcr-r42x.