Lucene search

K
osvGoogleOSV:GHSA-P3X5-5XPX-9PHM
HistoryMay 24, 2022 - 5:06 p.m.

Kubernetes ingress exposes sensitive information

2022-05-2417:06:10
Google
osv.dev
2

0.001 Low

EPSS

Percentile

35.9%

Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.

CPENameOperatorVersion
k8s.io/ingress-nginxlt1.5

0.001 Low

EPSS

Percentile

35.9%

Related for OSV:GHSA-P3X5-5XPX-9PHM