Lucene search
PRIOn knowledge basePRION:CVE-2021-25746HistoryMay 06, 2022 - 1:15 a.m.
Default configuration
2022-05-0601:15:00
PRIOn knowledge base
www.prio-n.com
4
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an Ingress object (in the networking.k8s.io or extensions API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ingress-nginx | lt | 1.2.0 |
Related
osv
osv
BIT-nginx-ingress-controller-2021-25746
2024-03-06 10:59:11
CVE-2021-25746
2022-05-06 01:15:09
cvelist
cvelist
CVE-2021-25746 Ingress-nginx directive injection via annotations
2022-04-22 00:00:00
veracode
veracode
Directive Injection
2022-05-09 08:33:54
redhatcve
redhatcve
CVE-2021-25746
2022-04-25 08:31:03
nvd
nvd
CVE-2021-25746
2022-05-06 01:15:09
cve
cve
CVE-2021-25746
2022-05-06 01:15:09
hackerone
hackerone
wallarmlab
wallarmlab
Two critical security flaws found in Nginx-Ingress controller
2022-05-12 21:52:03
ibm
ibm