Improper Input Validation

🗓️ 30 Aug 2024 12:09:04Reported by Veracode Vulnerability DatabaseType

Ingress-nginx vulnerable to improper input validation, risking command injection and credential exposure.

Reporter	Title	Published	Views	Family All 20
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	19 Dec 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Kubernetes ingress-nginx (CVE-2024-7646)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Nginx	28 Oct 202419:37	–	ibm
Information Security Automation	August Linux Patch Wednesday	4 Sep 202508:28	–	avleonov
BDU FSTEC	The vulnerability of the Ingress controller in the Kubernetes cluster ingress-nginx, related to errors in processing Ingress object annotations, allows a hacker to increase their privileges.	19 Aug 202400:00	–	bdu_fstec
Circl	CVE-2024-7646	16 Aug 202421:14	–	circl
CNNVD	Ingress NGINX Controller 安全漏洞	16 Aug 202400:00	–	cnnvd
CVE	CVE-2024-7646	16 Aug 202417:36	–	cve
Cvelist	CVE-2024-7646	16 Aug 202417:36	–	cvelist

Vulners

Node

kubernetes k8s.io/ingress-nginxRangecontroller-v0.34.0–0.10.0go

Source	Link
github	www.github.com/kubernetes/ingress-nginx/commit/6cd1f92775acbac657ada78f4a203fe7f6a78b3e
github	www.github.com/kubernetes/ingress-nginx/commit/a0ca7919295f445bf8843307c6ca253141f8f6f8
github	www.github.com/kubernetes/kubernetes/issues/126744
groups	www.groups.google.com/g/kubernetes-security-announce/c/a1__cKjWkfA
github	www.github.com/kubernetes/ingress-nginx/pull/11721
github	www.github.com/kubernetes/ingress-nginx/pull/11719
github	www.github.com/advisories/GHSA-qx8j-xj5q-v7r3
openwall	www.openwall.com/lists/oss-security/2024/08/16/5

27 Nov 2024 13:34Current

7.1High risk

Vulners AI Score7.1

CVSS 3.18.8

EPSS0.22179

SSVC