12 matches found
CVE-2025-71423
Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initializer logs the full NewMeshCert response — which contains the workload secret — to standard output at INFO level. As a result, workload secrets are exposed to any Kubernetes user wi...
CVE-2025-71423
Edgelesssys Contrast , a confidential-computing runtime for Kubernetes, is vulnerable in versions 1.9.0 before 1.12.2 . The root cause is that the initializer logs the full NewMeshCert response, which contains workload secrets , to standard output at the INFO level . This exposure allows any Kube...
EUVD-2025-211009
Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initializer logs the full NewMeshCert response — which contains the workload secret — to standard output at INFO level. As a result, workload secrets are exposed to any Kubernetes user wi...
CVE-2025-71423 Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure
Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initializer logs the full NewMeshCert response — which contains the workload secret — to standard output at INFO level. As a result, workload secrets are exposed to any Kubernetes user wi...
CVE-2025-71423 Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure
Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initializer logs the full NewMeshCert response — which contains the workload secret — to standard output at INFO level. As a result, workload secrets are exposed to any Kubernetes user wi...
CVE-2025-71423 Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure
Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initializer logs the full NewMeshCert response — which contains the workload secret — to standard output at INFO level. As a result, workload secrets are exposed to any Kubernetes user wi...
CVE-2025-71423: Insertion of Sensitive Information into Log File
Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initializer logs the full NewMeshCert response — which contains the workload secret — to standard output at INFO level. As a result, workload secrets are exposed to any Kubernetes user wi...
GO-2026-5624 Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast...
PT-2026-29926
Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast...
GO-2025-4078 Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast...