nuclei-templates/misconfiguration/kubernetes/unauth-etcd-server.yaml

39 lines
977 B
YAML

id: unauth-etcd-server
info:
name: Etcd Server - Unauthenticated Access
author: sharath,pussycat0x
severity: high
description: |
A Kubernetes etcd server stores the cluster secrets and configurations files. Anonymous access on etcd allows unauthenticated access the data without providing any authentication credentials.
reference:
- https://www.optiv.com/insights/source-zero/blog/kubernetes-attack-surface
remediation: https://etcd.io/docs/v2.3/authentication
metadata:
verified: "true"
shodan-query: product:"etcd"
tags: tech,k8s,kubernetes,devops,etcd,unauth,anonymous
requests:
- method: GET
path:
- "{{BaseURL}}/v2/keys/"
matchers-condition: and
matchers:
- type: word
part: body
words:
- '"node":'
- '"key":'
condition: and
- type: word
part: header
words:
- "application/json"
- type: status
status:
- 200