Go/k8s.io/kubernetes CVE-2019-11243: unknown, EPSS 1.49%
Kubernetes did not effectively clear service account credentials in k8s.io/kubernetes
Action: Upgrade k8s.io/kubernetes to 1.12.5 or later.
go get k8s.io/kubernetes@v1.12.5go get k8s.io/kubernetes@v1.13.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.12.0 | 1.12.5 | - |
| 1.13.0 | 1.13.1 | - |
Fixed versions
| 1.12.5 | 1.13.1 |
Sources
- osv: GO-2025-3645
- https://github.com/advisories/GHSA-gc2p-g4fg-29vh
- https://github.com/kubernetes/kubernetes/issues/76797
- https://security.netapp.com/advisory/ntap-20190509-0002
CVE-2019-11243 · published · modified · JSON