Multiple Flaws in Google Kubernetes Engine Let Attackers Escalate Privileges

Google Kubernetes Engine (GEK) has been detected with two flaws that a threat actor can utilize to create significant damage in case the threat actor already has access inside the Kubernetes cluster. The first issue was associated with FluentBit with default configuration. FluentBit is GKE’s logging agent that runs by default on all the clusters. […]

The post Multiple Flaws in Google Kubernetes Engine Let Attackers Escalate Privileges appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security …

access actor agent attackers case cluster configuration cyber security default engine flaws gke google google kubernetes engine issue kubernetes logging privileges threat threat actor vulnerability