Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 22

Export CSV
CVE-2021-25742

Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.

CVSS 3.1 · 7.6 High EPSS 2.1% KEV · Not listed
Vendors
Kubernetes Netapp
Products
Ingress-nginx Trident
CVE-2020-8553

Kubernetes ingress-nginx Compromise of auth via subset/superset namespace names

The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password file of another ingress which uses nginx.ingress.kubernetes.io/auth-type: basic and which has a hyphenated namespace or secret name.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Kubernetes
Products
Ingress-nginx