CVE-2019-10223
2 advisories.
Go/k8s.io/kube-state-metrics CVE-2019-10223, CVE-2019-17110: medium 6.5
kube-state-metrics may expose secret content in metrics
Action: Upgrade k8s.io/kube-state-metrics to 1.7.2 or later.
go get k8s.io/kube-state-metrics@v1.7.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.0 | 1.7.2 | - |
Fixed versions
| 1.7.2 |
Sources
- osv: GHSA-c92w-72c5-9x59
- https://nvd.nist.gov/vuln/detail/CVE-2019-10223
- https://github.com/kubernetes/kube-state-metrics/commit/03122fe3e2df49a9a7298b8af921d3c37c430f7f
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10223
- https://github.com/kubernetes/kube-state-metrics
- https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.7.2
- https://pkg.go.dev/vuln/GO-2022-0621
- https://www.openwall.com/lists/oss-security/2019/08/09/1
- http://www.openwall.com/lists/oss-security/2019/08/15/8
CVE-2019-10223, CVE-2019-17110 · published · modified · JSON
Go/k8s.io/kube-state-metrics CVE-2019-10223, CVE-2019-17110: unknown
Exposure of sensitive information in k8s.io/kube-state-metrics
Action: Upgrade k8s.io/kube-state-metrics to 1.7.2 or later.
go get k8s.io/kube-state-metrics@v1.7.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.0 | 1.7.2 | - |
Fixed versions
| 1.7.2 |
Sources
- osv: GO-2022-0621
- https://github.com/kubernetes/kube-state-metrics/commit/03122fe3e2df49a9a7298b8af921d3c37c430f7f
CVE-2019-10223, CVE-2019-17110 · published · modified · JSON