Lucene search
+L

3 matches found

osv_bit
osv_bit
•added 2024/03/06 10:59 a.m.•44 views

BIT-NGINX-INGRESS-CONTROLLER-2020-8553 Kubernetes ingress-nginx Compromise of auth via subset/superset namespace names

The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password file of another ingress which uses nginx.ingress.kubernetes.io/auth-type: basic and which has a hyphenated namespace ...

6AI score0.00894EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 4:01 a.m.•16 views

SUSE CVE-2020-8553

The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password file of another ingress which uses nginx.ingress.kubernetes.io/auth-type: basic and which has a hyphenated namespace ...

5.9CVSS5.8AI score0.00894EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2020/07/29 3:15 p.m.•15 views

CVE-2020-8553

The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password file of another ingress which uses nginx.ingress.kubernetes.io/auth-type: basic and which has a hyphenated namespace ...

5.9CVSS6AI score0.00894EPSS
SaveExploits0References2
Rows per page
Query Builder