Lucene search
Veracode Vulnerability DatabaseVERACODE:13670HistoryApr 23, 2019 - 5:23 a.m.
Information Disclosure
2019-04-2305:23:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.003
Percentile
71.6%
github.com/kubernetes/kubernetes is vulnerable to information disclosure. The vulnerability exists as the rest.AnonymousClientConfig() method failed to effectively remove the service account credentials, allowing an attacker to retrieve confidential information.
References
www.securityfocus.com/bid/108053
github.com/kubernetes/kubernetes/commit/863a63d863f002eb16843f6e3785702a6c27e76d
github.com/kubernetes/kubernetes/commit/a8dd22a3d55b6efb2ee3602d94af5d79609dfef7
github.com/kubernetes/kubernetes/issues/76797
github.com/kubernetes/kubernetes/pull/71723
github.com/kubernetes/kubernetes/pull/71937
security.netapp.com/advisory/ntap-20190509-0002/
Related
redhatcve
redhatcve
CVE-2019-11243
2020-02-25 01:30:57
prion
prion
Design/Logic Flaw
2019-04-22 15:29:00
cvelist
cvelist
CVE-2019-11243
2019-04-22 14:54:15
cve
cve
CVE-2019-11243
2019-04-22 15:29:00
debiancve
debiancve
CVE-2019-11243
2019-04-22 15:29:00
osv
osv
CVE-2019-11243
2019-04-22 15:29:00
nvd
nvd
CVE-2019-11243
2019-04-22 15:29:00
oraclelinux
oraclelinux
kubernetes security update
2019-07-29 00:00:00
kubernetes security update
2019-07-29 00:00:00
kubernetes security update
2019-07-29 00:00:00
ibm
ibm