Secure containerized environments with updated threat matrix for Kubernetes
microsoft.com · 23 Mar 2021 · Licence: not cleared; local research copy only
CVEs this report names
1 CVE- CVE-2021-1677Azure Active Directory Pod Identity Spoofing VulnerabilityMicrosoft · Microsoft Azure Kubernetes ServiceMedium · 5.51 report1.2%Top 33%21.8priority
Where it names them
CVE-2021-1677 Original (opens in a new tab) ↗
By using this technique, attackers can perform several attacks at the network-level which can lead to lateral movements, such as DNS spoofing or stealing cloud identities of other pods (CVE-2021-1677).
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.