Lateral movement

K8S API server without node authorization

Platform(s)

  • N/A

Compliance Frameworks

Description

It was found that node authorization is not set in the k8s api server configuration file. Node authorization restricts the kubelet ability to read secrets and volumes in its node only. Without it, the environment might be vulnerable to lateral movement from one node to another.
Need help?

Get a free Security Risk Assessment. Start today

Orca Security Demo Demo the Orca Platform-> In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.