CNCF, Google, and HackerOne launch Kubernetes bug bounty program

guest · Jan 14, 2020

CNCF, Google, and HackerOne launch Kubernetes bug bounty program
January 14, 2020
https://venturebeat.com/2020/01/14/cncf-google-and-hackerone-launch-kubernetes-bug-bounty-program/

The Cloud Native Computing Foundation (CNCF) today announced it is funding a bug bounty program for Kubernetes. Security researchers who find security vulnerabilities in Kubernetes’ codebase, as well as the build and release processes, will be rewarded with bounties ranging from $100 to $10,000.

Originally designed by Google and now run by the CNCF, Kubernetes is an open source container orchestration system for automating application deployment, scaling, and management.
Scope
A bug bounty for an open source infrastructure tool is rare. Given that there are more than 100 certified distributions of Kubernetes, the bug bounty program needs to apply to the Kubernetes code that powers all of them. HackerOne had its team pass the Certified Kubernetes Administrator exam to help members understand how to test the validity of a reported bug.

The bug bounty scope covers code from the main Kubernetes organizations on GitHub, as well as continuous integration, release, and documentation artifacts. The CNCF is particularly interested in cluster attacks, such as privilege escalations, authentication bugs, and remote code execution in the kubelet or API server.
Click to expand...

Kubernetes: Announcing the Kubernetes bug bounty program

Log in or Sign up

CNCF, Google, and HackerOne launch Kubernetes bug bounty program

guest Guest

Log in or Sign up

CNCF, Google, and HackerOne launch Kubernetes bug bounty program

guest Guest

Useful Searches