CVE-2019-11250

🗓️ 29 Aug 2019 00:40:43Reported by kubernetesType

The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher, potentially exposing credentials

Reporter	Title	Published	Views	Family All 76
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GoLang Go and Kubernetes affect IBM watsonx.data	18 Sep 202416:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	20 Aug 202218:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	25 Jun 202410:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataStage on Cloud Pak for Data is vulnerable to sensitive information leaks due to a flaw in the Kubernetes kube-apiserver (CVE-2019-11250, CVE-2020-8565)	13 Mar 202523:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Kubernetes affects IBM Watson Studio Local	20 Dec 201913:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	1 Sep 202514:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Kubernetes affect IBM InfoSphere Information Server	1 Apr 202121:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Kubernetes affects watsonx.data	3 Sep 202420:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm

NVD

Node

kubernetes kubernetesRange<1.15.3

kubernetes kubernetesMatch1.15.3-

kubernetes kubernetesMatch1.15.4beta0

kubernetes kubernetesMatch1.16.0alpha1

kubernetes kubernetesMatch1.16.0alpha2

kubernetes kubernetesMatch1.16.0alpha3

kubernetes kubernetesMatch1.16.0beta1

kubernetes kubernetesMatch1.16.0beta2

Node

redhat openshift_container_platformMatch3.11

redhat openshift_container_platformMatch4.1

[
  {
    "product": "Kubernetes",
    "vendor": "Kubernetes",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 1.16"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2020/10/16/2
security	www.security.netapp.com/advisory/ntap-20190919-0003/
access	www.access.redhat.com/errata/RHSA-2019:4052
access	www.access.redhat.com/errata/RHSA-2019:4087
github	www.github.com/kubernetes/kubernetes/issues/81114

21 Nov 2024 04:20Current

5.7Medium risk

Vulners AI Score5.7

CVSS 23.5

CVSS 3.16.5

CVSS 34.7

EPSS0.0081

CWE-532