Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2025/01/29 8:47 p.m.18 views

kube-audit-rest's example logging configuration could disclose secret values in the audit log

Impact What kind of vulnerability is it? Who is impacted? If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. Patches Has the problem been patched? What versions should use...

5.1CVSS6.2AI score0.00192EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2025/01/29 8:15 p.m.2385 views

CVE-2025-24884

The CVE-2025-24884 entry concerns kube-audit-rest, a simple logger for Kubernetes API mutations. When the here-described full-elastic-stack example vector is used, previous values of Kubernetes secrets could be disclosed in audit messages due to the logger capturing sensitive data. Fixed in versi...

5.1CVSS6.4AI score0.00192EPSS
SaveExploits0References2
Rows per page
Query Builder