漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).
CVSS Information
N/A
Vulnerability Type
证书验证不恰当
Vulnerability Title
ManageIQ MiqExpression 信任管理问题漏洞
Vulnerability Description
ManageIQ MiqExpression是一个功能模块。 ManageIQ MiqExpression存在安全漏洞，该漏洞源于应用中。Kubernetes REST API 的 Ruby 客户端中解析文件存在问题，当kubeconfig 文件没有配置自定义 CA 来验证证书时，kubeclient 最终会接受任何证书。攻击者利用该漏洞可以实现中间人攻击。
CVSS Information
N/A
Vulnerability Type
N/A