Lucene search
GoogleOSV:CVE-2021-25746HistoryMay 06, 2022 - 1:15 a.m.
CVE-2021-25746
2022-05-0601:15:09
Google
osv.dev
6
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an Ingress object (in the networking.k8s.io or extensions API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.
Related
osv
osv
BIT-nginx-ingress-controller-2021-25746
2024-03-06 10:59:11
cvelist
cvelist
CVE-2021-25746 Ingress-nginx directive injection via annotations
2022-04-22 00:00:00
prion
prion
Default configuration
2022-05-06 01:15:00
veracode
veracode
Directive Injection
2022-05-09 08:33:54
redhatcve
redhatcve
CVE-2021-25746
2022-04-25 08:31:03
nvd
nvd
CVE-2021-25746
2022-05-06 01:15:09
cve
cve
CVE-2021-25746
2022-05-06 01:15:09
hackerone
hackerone
wallarmlab
wallarmlab
Two critical security flaws found in Nginx-Ingress controller
2022-05-12 21:52:03
ibm
ibm