CVE-2021-25742

 

Published at: - 21-10-2021 06:00

Last modified: - 21-10-2021 06:00

Total changes: - 1

Description

CVE-2021-25742 k8s.io/ingress-nginx: Custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

 

 

Reference

• https://bugzilla.redhat.com/show_bug.cgi?id=2012036
• https://groups.google.com/g/kubernetes-security-announce/c/mT4JJxi9tQY

 

Keywords

REDHAT

 

CVE-2021-25742

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures