Kubernetes
A critical vulnerability in an Azure tool that lets users manage Kubernetes clusters can be exploited remotely without authentication to gain administrative control over Kubernetes clusters, as well as Azure edge devices. The vulnerability, allocated a maximum possible CVSS (severity rating) score of 10 has been allocated CVE-2022-37968. It is
Canonical pulls update, as MS suggests rebooting affected VMs.
Kubernetes Cluster Autoscaler needed some tweaking...
Here's why you should be paying attention...
Cloud
|
Jul 19, 2021
"... however, when managing legacy static and mainstream applications, the approach is often time consuming and heavy-handed."