Wiz researchers have unearthed several critical vulnerabilities affecting Ingress NGINX Controller for Kubernetes (ingress-nginx) that may allow attackers to take over Kubernetes clusters. “Based on our analysis, about 43% of cloud environments are vulnerable to these vulnerabilities, with our research uncovering over 6,500 clusters, including Fortune 500 companies, that publicly expose vulnerable Kubernetes ingress controllers’ admission controllers to the public internet—putting them at immediate critical risk,” the researchers noted. The “IngressNightmare” vulnerabilities Ingress NGINX Controller … More
The post Ingress-nginx vulnerabilities can lead to Kubernetes cluster takeover appeared first on Help Net Security.