Telepresence Traffic Manager accepts unowned session IDs, allowing hijack of active sessions
Attackers could take over other people's connections in a dev cluster tool.
Summary
Telepresence enables local development against a remote Kubernetes or OpenShift cluster. An attacker who obtains a valid active session ID can attach a routed tunnel to that session and gain its network routing. Versions prior to 2.31.0 are affected.
Affected when
- Attacker obtains a valid active session ID (through log leakage, cluster-internal channels, or the unauthenticated ArriveAsClient endpoint)
What to do
Update to Telepresence 2.31.0 or later.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen