Lucene search
Veracode Vulnerability DatabaseVERACODE:4142HistoryMay 03, 2017 - 7:54 a.m.
Arbitrary Log Read
2017-05-0307:54:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.005
Percentile
76.4%
github.com/kubernetes/kubernetes is vulnerable to arbitrary log reads. Using a container name, attackers are able to read the pod logs.
References
rhn.redhat.com/errata/RHSA-2015-2615.html
access.redhat.com/errata/RHSA-2015:2544
access.redhat.com/errata/RHSA-2015:2615
access.redhat.com/security/cve/CVE-2015-7528
bugzilla.redhat.com/show_bug.cgi?id=1286745
github.com/kubernetes/kubernetes/commit/afd56495a1052a3387b81df1786a8d0f51bc8671
github.com/kubernetes/kubernetes/pull/17886
github.com/kubernetes/kubernetes/releases/tag/v1.2.0-alpha.5
github.com/openshift/origin/pull/6113
Related
redhat
redhat
(RHSA-2015:2615) Moderate: openshift security update
2015-12-10 20:18:31
(RHSA-2015:2544) Moderate: openshift security update
2015-12-03 17:37:27
cvelist
cvelist
CVE-2015-7528
2016-04-11 21:00:00
cve
cve
CVE-2015-7528
2016-04-11 21:59:09
nvd
nvd
CVE-2015-7528
2016-04-11 21:59:09
nessus
nessus
RHEL 7 : openshift (RHSA-2015:2544)
2018-12-04 00:00:00
prion
prion
Code injection
2016-04-11 21:59:00
osv
osv
Information Exposure in Kubernetes in github.com/kubernetes/kubernetes
2024-08-21 15:29:06
Information Exposure in Kubernetes
2022-04-12 22:40:14
veracode
veracode
Arbitrary Log Read
2019-01-15 09:08:56
github
github
Information Exposure in Kubernetes
2022-04-12 22:40:14
debiancve
debiancve
CVE-2015-7528
2016-04-11 21:59:09