Kubernetes CVE-2020-8555: Fixing the kube-controller-manager Information Leak
A medium-severity Server Side Request Forgery vulnerability (CVE-2020-8555) in Kubernetes’ kube-controller-manager allows privileged users to leak up to 500 bytes of data from internal endpoints. Here’s what you need to know and how to mitigate it.