6 ms·
So the attack vector is: - You have access to my file system - You have access to the helm repository You place malicious binaries outside the helm directory
by codebastard 1y ago
So the attack vector is:
- You have access to my file system
- You have access to the helm repository
You place malicious binaries outside the helm directory. Helm will now execute malicious code through the helm chart pointing outside the helm directory.
Don't I have already bigger problems if you have access to my file system to place there malicious code?
Is the danger here that one can get an execute permission? But if you can manipulate my helm chart why can you not also place the malicious code in the helm directory?
- romaaeterna 1y ago> You place malicious binaries outside the helm directory No, helm is the one doing this part in the vuln. Chart.lock is made a symlink to some important file, and helm will happily write to it.
- deleted 1y ago[deleted]
- Joker_vD 1y agoYeah, there is a rather strong "downloading and executing arbitrary code from the Internet may lead to execution of arbitrary code" kind of vibe there.
- steveBK123 1y agoAnd yet you just described the behavior of many mid-size company "DevOps" departments.
- captn3m0 1y agoStarting on the other side of the airtight hatchway: https://devblogs.microsoft.com/oldnewthing/20221004-00/?p=107246 https://devblogs.microsoft.com/oldnewthing/20221004-00/?p=10...
- nijave 1y agoSeems the normal mitigations apply i.e. validate with hash or save a local copy. Validate new versions before adopting
- nimih 1y ago> But if you can manipulate my helm chart why can you not also place the malicious code in the helm directory? If you can manipulate my helm chart, why not just do the RCE directly in my kubernetes cluster or whatever?