Service is using an external IP Affecting Service service in Kubernetes


0.0
high
    Severity Framework Snyk CCSS
    Rule category Containers / Best Practices

Is your enviroment affected by this misconfiguration?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
    Frameworks
    CIS-Controls
  • Snyk ID SNYK-CC-00649
  • credit Snyk Research Team

Description

The service has specified the use of an external IP address. External IPs can be abused to perform man in the middle attacks on the service.

How to fix?

Remove spec.externalIPs or spec.loadBalancerIP attributes.

Terraform

References