{"uuid": "2b17c66f-ec44-4d5b-b7bf-5d403ed409dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5044", "type": "seen", "source": "https://t.me/hacking_Attack/125027", "content": "Black Hat Ethical Hacking\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\n\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\nPost Views: 0 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA trio of unpatched high-severity security vulnerabilities in the NGINX Ingress controller for Kubernetes has recently been disclosed, posing a substantial threat to Kubernetes clusters. These vulnerabilities could potentially be exploited by threat actors to steal sensitive credentials from the cluster.\n\nThe identified vulnerabilities are as follows:\n\n1. CVE-2022-4886 (CVSS score: 8.8) \u2013 This vulnerability allows the bypassing of Ingress-nginx path sanitization, potentially leading to the theft of credentials from the ingress-nginx controller.\n\n2. CVE-2023-5043 (CVSS score: 7.6) \u2013 An Ingress-nginx annotation injection flaw enables arbitrary command execution, putting the cluster\u2019s security at risk.\n\n3. CVE-2023-5044 (CVSS score: 7.6) \u2013 This vulnerability facilitates code injection through the nginx.ingress.kubernetes.io/permanent-redirect annotation.\nAccording to Ben Hirschberg, CTO and co-founder of Kubernetes security platform ARMO, these vulnerabilities offer an attacker who can control the configuration of the Ingress object the ability to steal secret credentials from the cluster, particularly with CVE-2023-5043 and CVE-2023-5044.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe successful exploitation of these vulnerabilities could result in an adversary injecting arbitrary code into the ingress controller process, potentially gaining unauthorized access to sensitive data.\n\nCVE-2022-4886 stems from a lack of validation in the \u201cspec.rules[].http.paths[].path\u201d field, allowing an attacker with access to the Ingress object to pilfer Kubernetes API credentials from the ingress controller. Mitigations\n\nTo mitigate these issues, the software maintainers have released specific steps, including enabling the \u201cstrict-validate-path-type\u201d option and setting the \u2013enable-annotation-validation flag to prevent the creation of Ingress objects with invalid characters and enforce additional restrictions.\nTrending: Jeff Foley \u2013 OWASP Amass Founder Trending: Recon Tool: CHOMTE.SH\nUpgrading NGINX to version 1.19, in addition to adding the \u201c\u2013enable-annotation-validation\u201d command-line configuration, is recommended by ARMO to address CVE-2023-5043 and CVE-2023-5044.\n\nHirschberg emphasized that all these vulnerabilities converge on the same underlying problem \u2013 the privileged nature of ingress controllers, which have access to TLS secrets and Kubernetes API. Being public-facing components, they are especially vulnerable to external traffic entering the cluster through them. This calls for heightened security measures to protect Kubernetes clusters from potential breaches.\nTrending: StripedFly Malware: A Five-Year Undetected Threat to Windows and Linux Systems Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-4-1-300x15[...]", "creation_timestamp": "2026-09-05T01:00:44.393848Z"}