Lucene search
GoogleOSV:CVE-2021-25745HistoryMay 06, 2022 - 1:15 a.m.
CVE-2021-25745
2022-05-0601:15:09
Google
osv.dev
5
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the spec.rules[].http.paths[].path field of an Ingress object (in the networking.k8s.io or extensions API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.
Related
redhatcve
redhatcve
CVE-2021-25745
2022-04-25 08:30:58
github
github
Improper Input Validation in k8s.io/ingress-nginx
2022-05-07 00:00:49
veracode
veracode
Information Disclosure
2022-05-09 06:00:18
gitlab
gitlab
Improper Input Validation
2022-05-07 00:00:00
osv
osv
Improper Input Validation in k8s.io/ingress-nginx
2022-05-07 00:00:49
BIT-nginx-ingress-controller-2021-25745
2024-03-06 10:59:18
nvd
nvd
CVE-2021-25745
2022-05-06 01:15:09
prion
prion
Default configuration
2022-05-06 01:15:00
cve
cve
CVE-2021-25745
2022-05-06 01:15:09
cvelist
cvelist
ibm
ibm
wallarmlab
wallarmlab
Two critical security flaws found in Nginx-Ingress controller
2022-05-12 21:52:03