kube-hunter
kube-hunter copied to clipboard
Possible problem with k8s version detection
Currently the K8sClusterCveHunter
is subscribed once to a K8sVersionDisclosure
.
A problem could arise when scanning multiple nodes, each having a different k8s version. in such case we would assume all nodes to be with one of these versions.
Possible Solution
Add another "subscribe once" option, but correlating a check to the originating host attribute