Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 11:41 a.m.12 views

CVE-2025-24884

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16...

5.1CVSS6.7AI score0.00192EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/02/06 3:47 a.m.3 views

SUSE CVE-2025-24884

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16...

5.1CVSS6.9AI score0.00192EPSS
Exploits0References3
NVD
NVD
added 2025/01/29 9:15 p.m.13 views

CVE-2025-24884

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16...

5.1CVSS0.00192EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/29 8:15 p.m.25 views

CVE-2025-24884 kube-audit-rest's example logging configuration could disclose secret values in the audit log

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16...

5.1CVSS0.00192EPSS
Exploits0References2
CVE
CVE
added 2025/01/29 8:15 p.m.2373 views

CVE-2025-24884

The CVE-2025-24884 entry concerns kube-audit-rest, a simple logger for Kubernetes API mutations. When the here-described full-elastic-stack example vector is used, previous values of Kubernetes secrets could be disclosed in audit messages due to the logger capturing sensitive data. Fixed in versi...

5.1CVSS6.4AI score0.00192EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/01/29 8:15 p.m.17 views

CVE-2025-24884 kube-audit-rest's example logging configuration could disclose secret values in the audit log

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16...

5.1CVSS6.3AI score0.00192EPSS
Exploits0References2
OSV
OSV
added 2025/01/29 8:15 p.m.13 views

CVE-2025-24884 kube-audit-rest's example logging configuration could disclose secret values in the audit log

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16...

5.1CVSS6.7AI score0.00192EPSS
Exploits0References4
Rows per page
Query Builder