
IngressNightmare (CVE-2025-1974)
Ce script Python peut vous aider à savoir si vous utilisez Ingress NGINX Controller, et si oui, s'il utilise une version connue comme vulnérable.
Tout d'abord, assurez-vous d'installer uv à partir d'ici, puis exécutez le script sur le cluster Kubernetes à auditer.
uv run --with kubernetes,packaging check.py
Checking for ingress-nginx pods...
ℹ️ It looks like you're using the NGinx ingress controller.
Checking service 'ingress-nginx-controller-admission' in namespace 'ingress-nginx'...
ℹ️ Found related service 'ingress-nginx-controller-admission' of type: ClusterIP
→ ClusterIP: 10.100.127.164
📦 Images used by ingress-nginx controller pods:
- registry.k8s.io/ingress-nginx/controller:v1.12.0@sha256:e6b8de175acda6ca913891f0f727bca4527e797d52688cbe9fec9040d6f6b6fa
🔢 Detected ingress-nginx controller versions:
→ 1.12.0 🛑 LIKELY VULNERABLE
Checking for ingress-nginx pods...
ℹ️ It looks like you're using the NGinx ingress controller.
Checking service 'ingress-nginx-controller-admission' in namespace 'ingress-nginx'...
ℹ️ Found related service 'ingress-nginx-controller-admission' of type: ClusterIP
→ ClusterIP: 10.96.74.187
📦 Images used by ingress-nginx controller pods:
- registry.k8s.io/ingress-nginx/controller:v1.12.1@sha256:d2fbc4ec70d8aa2050dd91a91506e998765e86c96f32cffb56c503c9c34eed5b
🔢 Detected ingress-nginx controller versions:
→ 1.12.1 ✅ Likely safe