Lucene search
Veracode Vulnerability DatabaseVERACODE:40701HistoryMay 26, 2023 - 8:27 a.m.
Authentication Bypass
2023-05-2608:27:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
authentication bypass
vulnerability
minikube
default password
ssh access
container
0.0004 Low
EPSS
Percentile
9.2%
github.com/kubernetes/minikube is vulnerable to Authentication Bypass. The vulnerability exists due to the use of hard-coded credentials which allows a local attacker to use the default password and bypass the login via ssh access to the minikube container.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/kubernetes/minikube | le | v1.29.0 | |
| github.com/kubernetes/minikube | le | v1.29.0 |
Related
cve
cve
CVE-2023-1944
2023-05-24 17:15:09
prion
prion
Default credentials
2023-05-24 17:15:00
osv
osv
CVE-2023-1944
2023-05-24 17:15:09
nvd
nvd
CVE-2023-1944
2023-05-24 17:15:09
cvelist
cvelist
CVE-2023-1944 [minikube] ssh server with default password
2023-05-24 00:00:00
openvas
openvas
SSH Brute Force Logins With Default Credentials Reporting
2016-11-02 00:00:00