{"action":"created","issue":{"url":"https://api.github.com/repos/gravitational/cve-2018-1002105/issues/2","repository_url":"https://api.github.com/repos/gravitational/cve-2018-1002105","labels_url":"https://api.github.com/repos/gravitational/cve-2018-1002105/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/gravitational/cve-2018-1002105/issues/2/comments","events_url":"https://api.github.com/repos/gravitational/cve-2018-1002105/issues/2/events","html_url":"https://github.com/gravitational/cve-2018-1002105/issues/2","id":388002668,"node_id":"MDU6SXNzdWUzODgwMDI2Njg=","number":2,"title":"False positive for clusters that do not use cert-based authentication","user":{"login":"brycecarman","id":1350710,"node_id":"MDQ6VXNlcjEzNTA3MTA=","avatar_url":"https://avatars0.githubusercontent.com/u/1350710?v=4","gravatar_id":"","url":"https://api.github.com/users/brycecarman","html_url":"https://github.com/brycecarman","followers_url":"https://api.github.com/users/brycecarman/followers","following_url":"https://api.github.com/users/brycecarman/following{/other_user}","gists_url":"https://api.github.com/users/brycecarman/gists{/gist_id}","starred_url":"https://api.github.com/users/brycecarman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brycecarman/subscriptions","organizations_url":"https://api.github.com/users/brycecarman/orgs","repos_url":"https://api.github.com/users/brycecarman/repos","events_url":"https://api.github.com/users/brycecarman/events{/privacy}","received_events_url":"https://api.github.com/users/brycecarman/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-12-06T00:18:37Z","updated_at":"2018-12-06T17:01:09Z","closed_at":null,"author_association":"NONE","body":"This tool does not appear to work on clusters that do not use certificates for authentication to connect to the cluster. This causes the tool to incorrectly assume that the cluster is vulnerable, even if it is fully patched. \r\n\r\nIf you dump the response from the original request, you can see that RBAC identifies the user as anonymous. The api call to do the exec is rejected before it is even proxied to kubelet.\r\n```\r\n{\r\n   \"kind\":\"Status\",\r\n   \"apiVersion\":\"v1\",\r\n   \"metadata\":{\r\n\r\n   },\r\n   \"status\":\"Failure\",\r\n   \"message\":\"pods \\\"bb\\\" is forbidden: User \\\"system:anonymous\\\" cannot get pods/exec in the namespace \\\"default\\\"\",\r\n   \"reason\":\"Forbidden\",\r\n   \"details\":{\r\n      \"name\":\"bb\",\r\n      \"kind\":\"pods\"\r\n   },\r\n   \"code\":403\r\n}  \r\n```\r\n\r\nThis likely applies to other failure cases where the test fails to properly execute so it incorrectly identifies the cluster as vulnerable.\r\n"},"comment":{"url":"https://api.github.com/repos/gravitational/cve-2018-1002105/issues/comments/444947748","html_url":"https://github.com/gravitational/cve-2018-1002105/issues/2#issuecomment-444947748","issue_url":"https://api.github.com/repos/gravitational/cve-2018-1002105/issues/2","id":444947748,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0NDk0Nzc0OA==","user":{"login":"knisbet","id":12373072,"node_id":"MDQ6VXNlcjEyMzczMDcy","avatar_url":"https://avatars3.githubusercontent.com/u/12373072?v=4","gravatar_id":"","url":"https://api.github.com/users/knisbet","html_url":"https://github.com/knisbet","followers_url":"https://api.github.com/users/knisbet/followers","following_url":"https://api.github.com/users/knisbet/following{/other_user}","gists_url":"https://api.github.com/users/knisbet/gists{/gist_id}","starred_url":"https://api.github.com/users/knisbet/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/knisbet/subscriptions","organizations_url":"https://api.github.com/users/knisbet/orgs","repos_url":"https://api.github.com/users/knisbet/repos","events_url":"https://api.github.com/users/knisbet/events{/privacy}","received_events_url":"https://api.github.com/users/knisbet/received_events","type":"User","site_admin":false},"created_at":"2018-12-06T17:01:09Z","updated_at":"2018-12-06T17:01:09Z","author_association":"COLLABORATOR","body":"I did last night:\r\nhttps://github.com/gravitational/cve-2018-1002105/blob/master/main.go#L113-L116\r\nhttps://github.com/gravitational/cve-2018-1002105/blob/master/main.go#L153-L159"}}
{"actor":{"display_login":"knisbet"}}