Go/k8s.io/kubernetes CVE-2019-11250: medium 6.5, EPSS 1.77%
Kubernetes client-go library logs may disclose credentials to unauthorized users
Action: Upgrade k8s.io/kubernetes to 1.16.0-beta.1 or later.
go get k8s.io/kubernetes@v1.16.0-beta.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.16.0-beta.1 | - |
Fixed versions
| 1.16.0-beta.1 |
Sources
- osv: GHSA-jmrx-5g74-6v2f#Go/k8s.io/kubernetes
- https://nvd.nist.gov/vuln/detail/CVE-2019-11250
- https://github.com/kubernetes/kubernetes/issues/81114
- https://github.com/kubernetes/kubernetes/pull/81330
- https://github.com/kubernetes/kubernetes/commit/4441f1d9c3e94d9a3d93b4f184a591cab02a5245
- https://access.redhat.com/errata/RHSA-2019:4052
- https://access.redhat.com/errata/RHSA-2019:4087
- https://github.com/kubernetes/kubernetes
- https://pkg.go.dev/vuln/GO-2021-0065
- https://security.netapp.com/advisory/ntap-20190919-0003
- http://www.openwall.com/lists/oss-security/2020/10/16/2
CVE-2019-11250 · published · modified · JSON