Threats tagged 'ghsa-w7r3-mgwf-4mqq'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.8	EPSS 0.3%	CVE-2025-9708KubernetesClient: Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain Medium6.8EPSS 0.3%2025-09-17GCVE DatabaseCVE-2025-9708 The Kubernetes C# client contains a vulnerability in its certificate validation logic that improperly accepts certificates from any Certificate Authority without verifying the trust chain. This flaw could allow attackers to present forged certificates, enabling man-in-the-middle attacks and impersonation of the Kubernetes API server. The issue affects versions prior to 17.0.14 and has been assigned CVE-2025-9708. A patch is available in version 17.0.14 to address this vulnerability. EPSS 0.3%Report on CVE-2025-9708 Vulnerability CWE-295 #ghsa-w7r3-mgwf-4mqq #nuget	GCVE Database	2025-09-17

Page 1 of 1