Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11231 State: PUBLISHED Published: 2019-05-22T17:05:50 Last Updated: 2024-08-04T22:48:09.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content (PHP code, for example). This vulnerability is triggered by an authenticated user; however, authentication can be bypassed. According to the official documentation for installation step 10, an admin is required to upload all the files, including the .htaccess files, and run a health check. However, what is overlooked is that the Apache HTTP Server by default no longer
htaccess files, and run a health check. However, what is overlooked is that the Apache HTTP Server by default no longer enables the AllowOverride directive, leading to data/users/admin.xml password exposure. The passwords are hashed but this can be bypassed by starting with the data/other/authorization.xml API key. This allows one to target the session state, since they decided to roll their own implementation. The cookie_name is crafted information that can be leaked from the frontend (site name and version). If a someone leaks the API key and the admin username, then they can bypass authentication. To do so, they need to supply a cookie based on an SHA-1 computation of this known informati
can bypass authentication. To do so, they need to supply a cookie based on an SHA-1 computation of this known information. The vulnerability exists in the admin/theme-edit.php file. This file checks for forms submissions via POST requests, and for the csrf nonce. If the nonce sent is correct, then the file provided by the user is uploaded. There is a path traversal allowing write access outside the jailed themes directory root. Exploiting the traversal is not necessary because the .htaccess file is ignored. A contributing factor is that there isn't another check on the extension before saving the file, with the assumption that the parameter content is safe. This allows the creation of web a
ension before saving the file, with the assumption that the parameter content is safe. This allows the creation of web accessible and executable files with arbitrary content. Additional Analyst Notes: - CVE Program Container: References: - https://ssd-disclosure.com/?p=3899&preview=true - http://packetstormsecurity.com/files/152961/GetSimpleCMS-3.3.15-Remote-Code-Execution.html
CVE ID: CVE-2019-11232 State: PUBLISHED Published: 2019-06-19T16:50:48 Last Updated: 2024-08-04T22:48:09.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information (Password) without being authenticated, by sending an EMP_NO element to the kws_login/asp/query_user.asp URI, and then reading the PWD element. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/keniver/dd27ba44d0aef4318551e647d927242f
CVE ID: CVE-2019-11233 State: PUBLISHED Published: 2019-06-19T16:53:51 Last Updated: 2024-08-04T22:48:09.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information without being authenticated, by sending a LOGIN_ID element to the auth/main/asp/check_user_login_info.aspx URI, and then reading the response, as demonstrated by the KW_EMAIL or KW_TEL field. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/keniver/dd27ba44d0aef4318551e647d927242f
CVE ID: CVE-2019-11234 State: PUBLISHED Published: 2019-04-21T16:36:48 Last Updated: 2024-08-04T22:48:08.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497. Additional Analyst Notes: - CVE Program Container: References: - https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19 - https://papers.mathyvanhoef.com/dragonblood.pdf - https://www.kb.cert.org/vuls/id/871675/ - https://freeradius.org/security/ - https://bugzilla.redhat.com/show_bug.cgi?id=1695783 - https://usn.ubuntu.com/3954-1/ - http://lists.opensuse.org/opensuse-security
gzilla.redhat.com/show_bug.cgi?id=1695783 - https://usn.ubuntu.com/3954-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html - https://access.redhat.com/errata/RHSA-2019:1131 - https://access.redhat.com/errata/RHSA-2019:1142 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html
CVE ID: CVE-2019-11235 State: PUBLISHED Published: 2019-04-21T16:40:32 Last Updated: 2024-08-04T22:48:08.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used" protection mechanism, aka a "Dragonblood" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499. Additional Analyst Notes: - CVE Program Container: References: - https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19 - https://papers.mathyvanhoef.com/dragonblood.pdf - https://www.kb.cert.org/vuls/id/871675/ - https://freeradius.org/se
- https://papers.mathyvanhoef.com/dragonblood.pdf - https://www.kb.cert.org/vuls/id/871675/ - https://freeradius.org/security/ - https://bugzilla.redhat.com/show_bug.cgi?id=1695748 - https://usn.ubuntu.com/3954-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html - https://access.redhat.com/errata/RHSA-2019:1131 - https://access.redhat.com/errata/RHSA-2019:1142 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html
CVE ID: CVE-2019-11236 State: PUBLISHED Published: 2019-04-15T00:00:00 Last Updated: 2024-08-04T22:48:09.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/urllib3/urllib3/issues/1553 - https://usn.ubuntu.com/3990-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TBI45HO533KYHNB5YRO43TBYKA3E3VRL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R62XGEYPUTXMRHGX5I37EBCGQ5COH
//lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R62XGEYPUTXMRHGX5I37EBCGQ5COHGKR/ - https://lists.debian.org/debian-lts-announce/2019/06/msg00016.html - https://usn.ubuntu.com/3990-2/ - https://access.redhat.com/errata/RHSA-2019:2272 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html - https://access.redhat.com/errata/RHSA-2019:3590 - https://access.redhat.com/errata/RHSA-2019:3335 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NKGPJLVLVYCL4L4B4G5TIOTVK4BKPG72/ - https://lists.fedoraproject.org/ar
ackage-announce%40lists.fedoraproject.org/message/NKGPJLVLVYCL4L4B4G5TIOTVK4BKPG72/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOSA2NT4DUQDBEIWE6O7KKD24XND7TE2/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00015.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00012.html
CVE ID: CVE-2019-11242 State: PUBLISHED Published: 2019-07-12T19:04:51 Last Updated: 2024-08-04T22:48:08.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity clusters did not verify TLS certificates presented by vCenter. This vulnerability could expose Cohesity user credentials configured to access vCenter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cohesity/SecAdvisory/blob/master/README.md
CVE ID: CVE-2019-11243 State: PUBLISHED Published: 2019-04-22T14:54:15 Last Updated: 2024-08-04T22:48:09.023Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-271 Description: In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (bearer token, username/password, and client certificate/key data). In the affected versions, rest.AnonymousClientConfig() did not effectively clear service account credentials loaded using rest.InClusterConfig() Additional Analyst Notes: - CVE Program Container: References: - https://github.com
loaded using rest.InClusterConfig() Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/76797 - http://www.securityfocus.com/bid/108053 - https://security.netapp.com/advisory/ntap-20190509-0002/
CVE ID: CVE-2019-11244 State: PUBLISHED Published: 2019-04-22T14:54:15 Last Updated: 2024-08-04T22:48:09.162Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-524 Description: In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with world-writeable permissions (rw-rw-rw-). If --cache-dir is specified and pointed at a different location accessible to other users/groups, the written files may be modified by other users/groups and disrupt the kubectl invocation. Additional Analyst Notes: - CVE Program Container: Refe
dified by other users/groups and disrupt the kubectl invocation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/76676 - http://www.securityfocus.com/bid/108064 - https://security.netapp.com/advisory/ntap-20190509-0002/ - https://access.redhat.com/errata/RHSA-2019:3942 - https://access.redhat.com/errata/RHSA-2020:0020 - https://access.redhat.com/errata/RHSA-2020:0074
CVE ID: CVE-2019-11245 State: PUBLISHED Published: 2019-08-29T00:22:24.173224Z Last Updated: 2024-09-16T22:09:44.877Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-703 Description: In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (root) on container restart, or if the image was previously pulled to the node. If the pod specified mustRunAsNonRoot: true, the kubelet will refuse to start the container as root. If the pod did not specify mustRunAsNonRoot: true, the kubelet will run the container as uid 0. Additional Analyst Notes: - CVE Progr
d not specify mustRunAsNonRoot: true, the kubelet will run the container as uid 0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/78308 - https://security.netapp.com/advisory/ntap-20190919-0003/
CVE ID: CVE-2019-11246 State: PUBLISHED Published: 2019-08-29T00:23:54.992356Z Last Updated: 2024-09-16T23:01:11.541Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-61 Description: The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the us
d run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. Kubernetes affected versions include versions prior to 1.12.9, versions prior to 1.13.6, versions prior to 1.14.2, and versions 1.1, 1.2, 1.4, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/pull/76788 - https://groups.google.com/forum/#%21topic/kubernetes-security-announce/NLs2TGbfPdo - https://security.netapp.com/advisory/ntap-20190919-0003/
CVE ID: CVE-2019-11247 State: PUBLISHED Published: 2019-08-29T00:25:27.667656Z Last Updated: 2024-09-16T18:04:25.053Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-20 Description: The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings within the namespace, meaning that a user with access only to a resource in one namespace could create, view update or delete the cluster-scoped resource (according to their namespace ro
source in one namespace could create, view update or delete the cluster-scoped resource (according to their namespace role privileges). Kubernetes affected versions include versions prior to 1.13.9, versions prior to 1.14.5, versions prior to 1.15.2, and versions 1.7, 1.8, 1.9, 1.10, 1.11, 1.12. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/80983 - https://groups.google.com/d/msg/kubernetes-security-announce/vUtEcSEY6SM/v2ZZxsmtFQAJ - https://access.redhat.com/errata/RHSA-2019:2690 - https://security.netapp.com/advisory/ntap-20190919-0003/ - https://access.redhat.com/errata/RHBA-2019:2816 - https://access.redhat.com/errata/RH
com/advisory/ntap-20190919-0003/ - https://access.redhat.com/errata/RHBA-2019:2816 - https://access.redhat.com/errata/RHBA-2019:2824 - https://access.redhat.com/errata/RHSA-2019:2769
CVE ID: CVE-2019-11248 State: PUBLISHED Published: 2019-08-29T00:26:08.867578Z Last Updated: 2024-09-17T03:28:37.165Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-419 Description: The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10 are affected. The issue is of medium severity, but not e
service. Versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10 are affected. The issue is of medium severity, but not exposed by the default configuration. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/81023 - https://groups.google.com/d/msg/kubernetes-security-announce/pKELclHIov8/BEDtRELACQAJ - https://security.netapp.com/advisory/ntap-20190919-0003/
CVE ID: CVE-2019-11249 State: PUBLISHED Published: 2019-08-29T00:26:18.429187Z Last Updated: 2024-09-16T18:19:22.322Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-61 Description: The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the us
d run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. Kubernetes affected versions include versions prior to 1.13.9, versions prior to 1.14.5, versions prior to 1.15.2, and versions 1.1, 1.2, 1.4, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/d/msg/kubernetes-security-announce/vUtEcSEY6SM/v2ZZxsmtFQAJ - https://github.com/kubernetes/kubernetes/issues/80984 - https://security.netapp.com/advisory/ntap-20190919-0003/ - https://access.redhat.c
/kubernetes/kubernetes/issues/80984 - https://security.netapp.com/advisory/ntap-20190919-0003/ - https://access.redhat.com/errata/RHBA-2019:2816 - https://access.redhat.com/errata/RHBA-2019:2794 - https://access.redhat.com/errata/RHBA-2019:2824 - https://access.redhat.com/errata/RHSA-2019:3239 - https://access.redhat.com/errata/RHSA-2019:3811
CVE ID: CVE-2019-11250 State: PUBLISHED Published: 2019-08-29T00:40:43.341051Z Last Updated: 2024-09-17T02:06:55.457Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-532 Description: The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components (such as kube-apiserver) prior to v1.16.0, which make use of basic or bearer token authentication, and run at high verbosity levels, are affected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernete
sity levels, are affected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/81114 - https://security.netapp.com/advisory/ntap-20190919-0003/ - https://access.redhat.com/errata/RHSA-2019:4052 - https://access.redhat.com/errata/RHSA-2019:4087 - http://www.openwall.com/lists/oss-security/2020/10/16/2
CVE ID: CVE-2019-11251 State: PUBLISHED Published: 2020-02-03T15:35:13 Last Updated: 2024-08-04T22:48:09.005Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-61 Description: The Kubernetes kubectl cp command in versions 1.1-1.12, and versions prior to 1.13.11, 1.14.7, and 1.15.4 allows a combination of two symlinks provided by tar output of a malicious container to place a file outside of the destination directory specified in the kubectl cp invocation. This could be used to allow an attacker to place a nefarious file using a symlink, outside of the destination tree. Additional Analyst Notes: - CVE Program C
er to place a nefarious file using a symlink, outside of the destination tree. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/87773 - https://groups.google.com/d/msg/kubernetes-announce/YYtEFdFimZ4/nZnOezZuBgAJ
CVE ID: CVE-2019-11252 State: PUBLISHED Published: 2020-07-23T14:47:38.187100Z Last Updated: 2024-09-17T04:24:20.027Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-209 Description: The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/pull/88684
CVE ID: CVE-2019-11253 State: PUBLISHED Published: 2019-10-17T15:40:10.154574Z Last Updated: 2024-09-16T23:21:47.959Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-20 Description: Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Cl
to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/83253 - https://groups.google.com/forum/#%21topic/kubernetes-security-announce/jk8polzSUxs - https://access.redhat.com/errata/RHSA-2019:3239 - https://security.netapp.com/advisory/ntap-20191031-0006/ - https://access.redhat.com/errata/RHSA-2019:3811 - https://access.redhat.com/errata/RHSA-2019:3905
CVE ID: CVE-2019-11254 State: PUBLISHED Published: 2020-04-01T20:30:15.907694Z Last Updated: 2024-09-16T23:16:55.380Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-1050 Description: The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to cause the kube-apiserver to consume excessive CPU cycles while parsing YAML. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/89535 - https://groups.google.com/d/msg/kubernetes-announce/ALL9s73E5ck
https://github.com/kubernetes/kubernetes/issues/89535 - https://groups.google.com/d/msg/kubernetes-announce/ALL9s73E5ck/4yHe8J-PBAAJ - https://security.netapp.com/advisory/ntap-20200413-0003/
CVE ID: CVE-2019-11255 State: PUBLISHED Published: 2019-12-05T16:05:18.735741Z Last Updated: 2024-09-16T23:05:20.635Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N) Vendors: Kubernetes Products: kubernetes-csi external-provisioner, kubernetes-csi external-snapshotter, kubernetes-csi external-resizer Problem Types: CWE-20 Description: Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshotter (<v0.4.2, <v1.0.2, v1.1, <1.2.2), and external-resizer (v0.1, v0.2) could result in unauthorized PersistentVolume data access or volume mutation during snapshot, restore from snapshot,
2) could result in unauthorized PersistentVolume data access or volume mutation during snapshot, restore from snapshot, cloning and resizing operations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/85233 - https://groups.google.com/forum/#%21topic/kubernetes-security-announce/aXiYN0q4uIw - https://access.redhat.com/errata/RHSA-2019:4099 - https://access.redhat.com/errata/RHSA-2019:4096 - https://access.redhat.com/errata/RHSA-2019:4054 - https://access.redhat.com/errata/RHSA-2019:4225 - https://security.netapp.com/advisory/ntap-20200810-0003/
CVE ID: CVE-2019-11256 State: REJECTED Published: 2020-02-03T15:00:25 Last Updated: 2020-02-03T15:00:25 Description: No description available.
CVE ID: CVE-2019-11257 State: REJECTED Published: 2020-02-03T15:00:25 Last Updated: 2020-02-03T15:00:25 Description: No description available.
CVE ID: CVE-2019-11258 State: REJECTED Published: 2020-02-03T15:00:25 Last Updated: 2020-02-03T15:00:25 Description: No description available.
CVE ID: CVE-2019-11259 State: REJECTED Published: 2020-02-03T15:00:26 Last Updated: 2020-02-03T15:00:26 Description: No description available.
CVE ID: CVE-2019-11260 State: REJECTED Published: 2020-02-03T15:00:26 Last Updated: 2020-02-03T15:00:26 Description: No description available.
CVE ID: CVE-2019-11261 State: REJECTED Published: 2020-02-03T15:00:26 Last Updated: 2020-02-03T15:00:26 Description: No description available.
CVE ID: CVE-2019-11262 State: REJECTED Published: 2020-02-03T15:00:27 Last Updated: 2020-02-03T15:00:27 Description: No description available.