CVE-2019-10223

🗓️ 15 Aug 2019 04:40:55Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 28 Views

A security issue in kube-state-metrics v1.7.0 and v1.7.1 allows secret content exposure in metric

Reporter	Title	Published	Views	Family All 16
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private for Data V2.1.0 NGINX (CVE-2019-12206, CVE-2019-12207, CVE-2019-12208, CVE-2019-20372), Docker (CVE-2019-17149, CVE-2019-17150), Kubernetes (CVE-2019-11245, CVE-2019-11253, CVE-2019-1022	6 Mar 202020:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Kubernetes affects IBM Watson Studio Local	20 Dec 201913:53	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Kubernetes (CVE-2019-17110, CVE-2019-10223, CVE-2019-11253)	14 Feb 202023:27	–	ibm
Circl	CVE-2019-10223	4 Feb 202408:37	–	circl
CNVD	Unspecified vulnerability in kube-state-metrics	6 Nov 201900:00	–	cnvd
CVE	CVE-2019-10223	5 Nov 201911:40	–	cve
Cvelist	CVE-2019-10223	5 Nov 201911:40	–	cvelist
EUVD	EUVD-2022-3542	3 Oct 202520:07	–	euvd
Github Security Blog	kube-state-metrics may expose secret content in metrics	24 May 202217:00	–	github
NVD	CVE-2019-10223	5 Nov 201912:15	–	nvd

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-10223
openwall	www.openwall.com/lists/oss-security/2019/08/09/1
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

24 Jan 2024 19:40Current

0.2Low risk

Vulners AI Score0.2

CVSS 24

CVSS 3.16.5

CVSS 35.3

EPSS0.01071

kube-state-metrics v1.7.0 v1.7.1 v1.7.2 security issue secret content metrics exposure