CVE-2020-8554

CVE-2020-8554 is a medium-severity vulnerability affecting all versions of Kubernetes, allowing an attacker to intercept traffic by manipulating ClusterIP or LoadBalancer service configurations. This man-in-the-middle attack requires specific privileges, such as the ability to create services with externalIPs or patch LoadBalancer service statuses. The vulnerability has a CVSS score of 5.0 (Medium) due to its network attack vector and high attack complexity, potentially leading to limited impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the CVE has garnered significant community discussion and media coverage, indicating awareness and concern within the cybersecurity community.