CVE-2019-11252
Fixed in a distro release EPSS <1%CVSS 5.9
The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes.
Products: Kubernetes
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | kubernetes | 1.18.0-1 |
| Debian 13 | kubernetes | 1.18.0-1 |
| Debian 14 | kubernetes | 1.18.0-1 |
| Red Hat openshift 4.5 | machine-config-daemon | 0:4.5.0-202007012112.p0.git.2527.d12c3da.el8 |
| Red Hat openshift 4.5 | openshift | 0:4.5.0-202007012112.p0.git.0.582d7fc.el7 |
| Red Hat openshift 4.5 | openshift | 0:4.5.0-202007012112.p0.git.0.582d7fc.el8 |
| Red Hat openshift 4.5 | openshift-hyperkube | 0:4.5.0-202007012112.p0.git.0.582d7fc.el7 |
| Red Hat openshift 4.5 | openshift-hyperkube | 0:4.5.0-202007012112.p0.git.0.582d7fc.el8 |