Description
Kubernetes Image Builder 凭证管理不当漏洞
Kubernetes Image Builder 凭证管理不当漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://discuss.kubernetes.io/t/security-advisory-cve-2024-9486-and-cve-2024-9594-vm-images-built-with-kubernetes-image-builder-use-default-credentials/30119
https://groups.google.com/g/kubernetes-security-announce/c/tuEsLUQu_PA
https://github.com/kubernetes/kubernetes/issues/128006
https://nvd.nist.gov/vuln/detail/cve-2024-9486
https://www.venustech.com.cn/new_type/aqtg/20241017/27969.html
https://nic.seu.edu.cn/info/1047/1217.htm
https://zeropath.com/blog/cve-2025-7342-kubernetes-image-builder-default-credentials-summary
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11326
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2024-133/
https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
https://www.bleepingcomputer.com/news/security/critical-kubernetes-image-builder-flaw-gives-ssh-root-access-to-vms/
https://www.techradar.com/pro/security/critical-kubernetes-image-builder-credential-vulnerability-allows-for-virtual-machine-ssh-access
https://www.theregister.com/security/2024/10/16/critical-kubernetes-image-builder-bug-allows-ssh-root-access/1184335