Detections
Analytics
Alpine: multiple k3s packages: security update to 1.20.6-r0 (deprecated)
medium Tenable Cloud Security Plugin ID 400238
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating
Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission
Webhook for Nodes that denies admission based at least partially on the old state of the Node object.
Validating Admission Webhook does not observe some previous fields. (CVE-2021-25735)
See Also
https://git.alpinelinux.org/aports/commit/?id=7f329716227ab2ea6ad119e5f96d73f007dbb141
https://git.alpinelinux.org/aports/commit/?id=ee8d5cf647145dea1263b01c18c31fc40e71b908
Plugin Details
Severity: Medium
ID: 400238
Version: Revision 1.25
Type: Local
Published: 8/16/2023
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.3
Percentile: 53.04
CVSS v2
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.1
Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:P
CVSS Score Source: CVE-2021-25735
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.7
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 4/17/2021
Vulnerability Publication Date: 4/19/2021
Reference Information
CVE: CVE-2021-25735