Lucene search
Mr-k0antiH1:1607940HistoryJun 20, 2022 - 8:44 p.m.
8x8: CVE-2019-11248 on http://█.█.█.█:9100/debug/pprof/goroutine
2022-06-2020:44:54
mr-k0anti
hackerone.com
94
exposed debugging endpoint
unauthenticated
kubelet healthz port
rectified
bug bounty
EPSS
0.628
Percentile
97.9%
@mr_k0anti reported to us an exposed debugging endpoint (/debug/pprof) over the unauthenticated Kubelet healthz port 9100. No sensitive information has been disclosed & the affected host belonged to our staging environment.
The issue has been rectified.
Related
ibm
ibm
hackerone
hackerone
debiancve
debiancve
CVE-2019-11248
2019-08-29 01:15:11
veracode
veracode
Information Disclosure
2019-08-08 00:52:28
osv
osv
CVE-2019-11248
2019-08-29 01:15:11
nvd
nvd
CVE-2019-11248
2019-08-29 01:15:11
redhatcve
redhatcve
CVE-2019-11248
2020-04-09 12:44:01
cvelist
cvelist
CVE-2019-11248 Kubernetes kubelet exposes /debug/pprof info on healthz port
2019-08-29 00:26:08
nuclei
nuclei
Debug Endpoint pprof - Exposure Detection
2020-08-19 14:33:23
prion
prion
Default configuration
2019-08-29 01:15:00
ubuntucve
ubuntucve
CVE-2019-11248
2019-08-29 00:00:00
cve
cve
CVE-2019-11248
2019-08-29 01:15:11
nessus
nessus
Photon OS 1.0: Kubernetes PHSA-2019-1.0-0252
2019-10-11 00:00:00
Photon OS 1.0: Kubernetes PHSA-2019-1.0-0255
2019-10-07 00:00:00
Photon OS 2.0: Kubernetes PHSA-2019-2.0-0177
2019-10-07 00:00:00
openvas
openvas
Fedora Update for kubernetes FEDORA-2019-2b8ef08c95
2019-08-27 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: kubernetes-1.15.2-1.fc30
2019-08-26 00:53:13
photon
photon