Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/10/16 6:49 p.m.•17 views

CVE-2025-62159

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

8.7CVSS6.7AI score0.00305EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/10 11:15 p.m.•23 views

CVE-2025-62159

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

8.7CVSS0.00305EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/10 10:23 p.m.•26 views

CVE-2025-62159 External Secrets Operator's BeyondTrust Provider has Insecure Secret Retrieval

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

8.7CVSS0.00305EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/10 10:23 p.m.•3 views

CVE-2025-62159 External Secrets Operator's BeyondTrust Provider has Insecure Secret Retrieval

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

8.7CVSS5.7AI score0.00305EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/10 10:23 p.m.•44 views

CVE-2025-62159

CVE-2025-62159 affects External Secrets Operator’s BeyondTrust provider (versions 0.10.1–0.19.2). The legacy code retrieved Kubernetes secrets directly without validating namespace context or secret store type, enabling cross‑namespace secret access and security boundary violations. In version 0....

8.7CVSS5.7AI score0.00305EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/10 10:23 p.m.•20 views

CVE-2025-62159 External Secrets Operator's BeyondTrust Provider has Insecure Secret Retrieval

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

8.7CVSS6.9AI score
SaveExploits0References3
Rows per page
Query Builder