services / Google Cloud / Cloud DNS GKE Clusters

Resources used by Cloud DNS to bind a private DNS zone or a DNS response policy with a GKE cluster.

dns.​gkeClusters.​bindDNSResponsePolicy

If the cluster is in a private DNS zone, an attacker can change DNS resolution behavior by binding a response policy. This can create a DOS. If the attacker additionally has permissions to create or update response policy rules, allows domain takeover.

Risks

1. Domain takeover (CRITICAL)
2. Denial-of-service (HIGH)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links