NetSight
medium5.9

CVE-2019-11252

The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for Azu…

Impact

The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes.

Affected products

VendorProductAffected versions
KubernetesKubernetes
from 1.0.0 through 1.17.0

Weakness classification

References