CVE-2020-8555: Fedoraproject Fedora

Medium severity, CVSS 6.3. EPSS: 3.7% chance of exploitation in the next 30 days.

The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows certain authorized users to leak up to 500 bytes of arbitrary information from unprotected endpoints within the master's host network (such as link-local or loopback services).

Affected products

• Fedoraproject Fedora: version 32 only
• Kubernetes Kubernetes: before 1.15.11 (fixed in 1.15.11); from 1.16.0, before 1.16.9 (fixed in 1.16.9); from 1.17.0, before 1.17.5 (fixed in 1.17.5); version 1.18.0 only

Published 2020-06-05. Last modified 2026-06-17.