K58935003: F5 Container Connector vulnerability CVE-2018-5543

Security Advisory Description The F5 BIG-IP Controller for Kubernetes k8s-bigip-crtl passes BIG-IP username and password as command line parameters, which may lead to disclosure of the credentials used by the container. CVE-2018-5543 Impact F5 BIG-IP Controller for Kubernetes This vulnerability...

CVE-2018-5543

CVE-2018-5543 affects the F5 BIG-IP Container Connector (k8s-bigip-ctlr) for Kubernetes, specifically versions 1.0.0–1.5.0. The root cause is that BIG-IP credentials are passed as command-line parameters, potentially disclosing the container’s credentials to non-privileged users on the Kubernetes...