Lucene search
K

rest.AnonymousClientConfig() does not remove the serviceaccount credentials from config created by rest.InClusterConfig()

🗓️ 18 Apr 2019 21:31:53Reported by Kubernetes Security Response CommitteeType 
kubernetes
 kubernetes
🔗 github.com👁 2 Views

AnonymousClientConfig fails to clear in-cluster credentials; upgrade client-go to 1.12.5+ or 1.13.1+.

Related
ReporterTitlePublishedViews
Family
CVE
CVE-2019-11243
22 Apr 201914:54
cve
Cvelist
CVE-2019-11243
22 Apr 201914:54
cvelist
Debian CVE
CVE-2019-11243
22 Apr 201914:54
debiancve
Oracle linux
kubernetes security update
29 Jul 201900:00
oraclelinux
Oracle linux
kubernetes security update
29 Jul 201900:00
oraclelinux
Oracle linux
kubernetes security update
29 Jul 201900:00
oraclelinux
EUVD
EUVD-2019-2941
7 Oct 202500:30
euvd
IBM Security Bulletins
Security Bulletin: Multiple Security Vulnerabilities affect IBM Cloud Private Kubernetes
15 May 201920:55
ibm
Github Security Blog
Kubernetes did not effectively clear service account credentials
24 May 202216:44
github
NVD
CVE-2019-11243
22 Apr 201915:29
nvd
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

18 Apr 2019 21:31Current
6.2Medium risk
Vulners AI Score6.2
CVSS 24.3
CVSS 3.18.1
CVSS 33.1
EPSS0.01492
2