CVE-2020-13597
Estado: ModificadaBaja (3.5)—
Clusters using Calico (version 3.14.0 and below), Calico Enterprise (version 2.8.2 and below), may be vulnerable to information disclosure if IPv6 is enabled but unused. A compromised pod with sufficient privilege is able to reconfigure the node’s IPv6 interface due to the node accepting route advertisement by default, allowing the attacker to redirect full or partial network traffic from the node to the compromised pod.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
- Puntuación base: 3.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.90%
- Percentil entre todas las CVEs puntuadas: 58
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-201
- CWE-200
Referencias
- https://github.com/kubernetes/kubernetes/issues/91507
- https://groups.google.com/forum/#%21topic/kubernetes-security-announce/BMb_6ICCfp8
- https://www.projectcalico.org/security-bulletins/
- https://github.com/kubernetes/kubernetes/issues/91507
- https://groups.google.com/forum/#%21topic/kubernetes-security-announce/BMb_6ICCfp8
- https://www.projectcalico.org/security-bulletins/
JSON original (NVD)
Mostrar
{
"id": "CVE-2020-13597",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.1,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "HIGH",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@tigera.io",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 6,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "LOW",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 3.7,
"exploitabilityScore": 1.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 3.5,
"attackVector": "NETWORK",
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 1.4,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "psirt@tigera.io",
"affectedData": [
{
"vendor": "Tigera Inc",
"product": "Calico",
"versions": [
{
"status": "affected",
"version": "3.14.0"
},
{
"status": "affected",
"version": "unspecified",
"versionType": "custom",
"lessThanOrEqual": "3.13.3"
},
{
"status": "affected",
"version": "unspecified",
"versionType": "custom",
"lessThanOrEqual": "3.12.1"
},
{
"status": "affected",
"version": "unspecified",
"versionType": "custom",
"lessThanOrEqual": "3.11.2"
},
{
"status": "affected",
"version": "unspecified",
"versionType": "custom",
"lessThanOrEqual": "3.10.3"
},
{
"status": "affected",
"version": "unspecified",
"versionType": "custom",
"lessThanOrEqual": "3.9.5"
},
{
"status": "affected",
"version": "unspecified",
"versionType": "custom",
"lessThanOrEqual": "3.8.8"
},
{
"status": "affected",
"version": "3.7.x"
},
{
"status": "affected",
"version": "3.6.x"
},
{
"status": "affected",
"version": "3.5.x"
},
{
"status": "affected",
"version": "3.4.x"
},
{
"status": "affected",
"version": "3.3.x"
},
{
"status": "affected",
"version": "3.2.x"
},
{
"status": "affected",
"version": "3.1.x"
},
{
"status": "affected",
"version": "3.0.x"
},
{
"status": "affected",
"version": "2.6.x"
},
{
"status": "affected",
"version": "2.5.x"
},
{
"status": "affected",
"version": "2.4.x"
},
{
"status": "affected",
"version": "2.3.x"
},
{
"status": "affected",
"version": "2.2.x"
},
{
"status": "affected",
"version": "2.1.x"
},
{
"status": "affected",
"version": "2.0.x"
},
{
"status": "affected",
"version": "1.6.x"
},
{
"status": "affected",
"version": "1.5.x"
}
]
},
{
"vendor": "Tigera Inc",
"product": "Calico Enterprise",
"versions": [
{
"status": "affected",
"version": "unspecified",
"versionType": "custom",
"lessThanOrEqual": "2.8.2"
},
{
"status": "affected",
"version": "unspecified",
"versionType": "custom",
"lessThanOrEqual": "2.7.4"
},
{
"status": "affected",
"version": "unspecified",
"versionType": "custom",
"lessThanOrEqual": "2.6.2"
},
{
"status": "affected",
"version": "2.5.x"
},
{
"status": "affected",
"version": "2.4.x"
},
{
"status": "affected",
"version": "2.3.x"
},
{
"status": "affected",
"version": "2.2.x"
},
{
"status": "affected",
"version": "2.1.x"
},
{
"status": "affected",
"version": "2.0.x"
}
]
}
]
}
],
"published": "2020-06-03T17:15:24.887",
"references": [
{
"url": "https://github.com/kubernetes/kubernetes/issues/91507",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"source": "psirt@tigera.io"
},
{
"url": "https://groups.google.com/forum/#%21topic/kubernetes-security-announce/BMb_6ICCfp8",
"source": "psirt@tigera.io"
},
{
"url": "https://www.projectcalico.org/security-bulletins/",
"tags": [
"Vendor Advisory"
],
"source": "psirt@tigera.io"
},
{
"url": "https://github.com/kubernetes/kubernetes/issues/91507",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://groups.google.com/forum/#%21topic/kubernetes-security-announce/BMb_6ICCfp8",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.projectcalico.org/security-bulletins/",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@tigera.io",
"description": [
{
"lang": "en",
"value": "CWE-201"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Clusters using Calico (version 3.14.0 and below), Calico Enterprise (version 2.8.2 and below), may be vulnerable to information disclosure if IPv6 is enabled but unused. A compromised pod with sufficient privilege is able to reconfigure the node’s IPv6 interface due to the node accepting route advertisement by default, allowing the attacker to redirect full or partial network traffic from the node to the compromised pod."
},
{
"lang": "es",
"value": "Los clústeres usando Calico (versión 3.14.0 y por debajo), Calico Enterprise (versión 2.8.2 y por debajo), pueden ser vulnerables a una divulgación de información si IPv6 está habilitado pero no se usa. Un pod comprometido con privilegios suficientes puede reconfigurar la interfaz IPv6 del nodo debido a que el nodo acepta el anuncio de ruta por defecto, permitiendo a un atacante redireccionar el tráfico de red total o parcial del nodo al pod comprometido."
}
],
"lastModified": "2026-06-17T02:53:25.920",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:projectcalico:calico:*:*:*:*:enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95DB38FE-A03E-456B-874A-A58C31BE7592",
"versionEndIncluding": "2.6.2"
},
{
"criteria": "cpe:2.3:a:projectcalico:calico:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CAFD1D82-33C2-4656-8E0F-ABF518E14C68",
"versionEndIncluding": "3.8.8"
},
{
"criteria": "cpe:2.3:a:projectcalico:calico:*:*:*:*:enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C016A3C9-D2ED-4CD6-93E1-2FF4876381C6",
"versionEndIncluding": "2.7.4",
"versionStartIncluding": "2.7.0"
},
{
"criteria": "cpe:2.3:a:projectcalico:calico:*:*:*:*:enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EB520BC-FACF-4C67-AFCD-73741DD633CD",
"versionEndIncluding": "2.8.2",
"versionStartIncluding": "2.8.0"
},
{
"criteria": "cpe:2.3:a:projectcalico:calico:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AEA624B-1358-4116-A19C-CF20513F0180",
"versionEndIncluding": "3.9.5",
"versionStartIncluding": "3.9.0"
},
{
"criteria": "cpe:2.3:a:projectcalico:calico:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBDF7B5C-D289-48D0-A9E9-D468D182D0E9",
"versionEndIncluding": "3.10.3",
"versionStartIncluding": "3.10.0"
},
{
"criteria": "cpe:2.3:a:projectcalico:calico:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1373217-1065-4919-ADC9-055B556D3A41",
"versionEndIncluding": "3.11.2",
"versionStartIncluding": "3.11.0"
},
{
"criteria": "cpe:2.3:a:projectcalico:calico:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4934106-DDAC-4E1B-BC8A-791EE911608F",
"versionEndIncluding": "3.12.1",
"versionStartIncluding": "3.12.0"
},
{
"criteria": "cpe:2.3:a:projectcalico:calico:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CBB409FF-5177-4C87-A45F-072CE3A4D7ED",
"versionEndIncluding": "3.13.3",
"versionStartIncluding": "3.13.0"
},
{
"criteria": "cpe:2.3:a:projectcalico:calico:3.14.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A78D854F-7BCB-4AF1-940E-AF61B469C0E5"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@tigera.io"
}