aquasecurity/kube-hunter

Evidence Field doesn't show all the affected pods based on the count.It displays only one pod details.

Open

#499 opened on Apr 28, 2022

View on GitHub
 (1 comment) (0 reactions) (0 assignees)Python (4,541 stars) (581 forks)batch import
buggood first issue

Description

What happened

Evidence field doesn't show all the affected pods rather it shows only the count and only one pod details

  • location: 127.0.0.1:10255 vid: KHV044 category: Privilege Escalation // Privileged container severity: high vulnerability: Privileged Container description: "A Privileged container exist on a node\n could expose the node/cluster
    \ to unwanted root operations" evidence: 'pod: pod1, container: everything-allowed-pod, count: 6' avd_reference: https://avd.aquasec.com/kube-hunter/khv044/ hunter: Kubelet Readonly Ports Hunter

This is the case with all the output formats.

Expected behavior

It should display all the affected pods and containers based on the count irrespective of the output format. I expect that it should show all the 6 pod names and its respective containers.

Contributor guide

Tech stack
pythonkubernetes
Domain
clisecurity
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
PythonKubernetes fundamentals
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60
Research direction
The issue is about the evidence field not displaying all affected pods. The fix likely involves modifying the report generation code to iterate over all pod entries instead of showing only the first one. Look in the kube hunter package for evidence formatting, possibly in the reports or events module. There are no linked pull requests or assignees, so this issue is available for contribution. Examine the existing output format and add a loop to display each pod's details.