The configuration “config.enableHelm: true” of the user interface of the Kubernetes cluster management software “Headlamp” allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the config.enableHelm: true configuration in the user interface of the Kubernetes cluster management software’s command-line tool is related to the disclosure of information through caching during the processing of the /clusters/main/helm/releases/list directory. Exploiting...