deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-15496
Published: 2019-08-28
Description: MyT Project Management 1.5.1 lacks CSRF protection and, for example, allows a user/create CSRF attack. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.sevenlayers.com/index.php/240-myt-project-management-1-5-1-csrf; https://www.sevenlayers.com/index.php/240-myt-project-management-1-5-1-csrf
CVE: CVE-2019-15720
Published: 2019-08-28
Description: CloudBerry Backup v6.1.2.34 allows local privilege escalation via a Pre or Post backup action. With only user-level access, a user can modify the backup plan and add a Pre backup action script that executes on behalf of NT AUTHORITY\SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://www.sevenlayers.com/index.php/243-cloudberry-backup-local-privilege-escalation; https://www.sevenlayers.com/index.php/243-cloudberry-backup-local-privilege-escalation
CVE: CVE-2019-5590
Published: 2019-08-28
Description: The URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may allow an attacker to execute unauthorized code or commands (Cross Site Scripting) via attack reports generated in HTML form.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/108786; https://fortiguard.com/advisory/FG-IR-19-070; http://www.securityfocus.com/bid/108786
CVE: CVE-2019-12643
Published: 2019-08-28
Description: A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on the managed Cisco IOS XE device. The vulnerability is due to an improper check performed by the area of code that manages the REST API authentication service. An attacker could exploit this vulnerability by submitting malicious HTTP requests to the targeted device. A successful exploit could allow the attacker to obtain the token-id of an authenticated user. This token-id could be used to bypass authentication and execute privileged actions through the interface of the REST API virtual service container on the affected Cisco IOS XE device. The REST API interface is not enabled by default and must be installed and activated separately on IOS XE devices. See the Details section for more information.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-iosxe-rest-auth-bypass; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-iosxe-rest-auth-bypass
CVE: CVE-2019-1962
Published: 2019-08-28
Description: A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause process crashes, which can result in a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient validation of TCP packets when processed by the Cisco Fabric Services over IP (CFSoIP) feature. An attacker could exploit this vulnerability by sending a malicious Cisco Fabric Services TCP packet to an affected device. A successful exploit could allow the attacker to cause process crashes, resulting in a device reload and a DoS condition. Note: There are three distribution methods that can be configured for Cisco Fabric Services. This vulnerability affects only distribution method CFSoIP, which is disabled by default. See the Details section for more information.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-fsip-dos; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-fsip-dos
CVE: CVE-2019-1963
Published: 2019-08-28
Description: A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of Abstract Syntax Notation One (ASN.1)-encoded variables in SNMP packets. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the SNMP daemon on the affected device. A successful exploit could allow the attacker to cause the SNMP application to restart multiple times, leading to a system-level restart and a denial of service (DoS) condition.
CVSS Score: 7.7 (HIGH)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-fxnxos-snmp-dos; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-fxnxos-snmp-dos
CVE: CVE-2019-1964
Published: 2019-08-28
Description: A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an unexpected restart of the netstack process on an affected device. The vulnerability is due to improper validation of IPv6 traffic sent through an affected device. An attacker could exploit this vulnerability by sending a malformed IPv6 packet through an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition while the netstack process restarts. A sustained attack could lead to a reboot of the device.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-ipv6-dos; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-ipv6-dos
CVE: CVE-2019-1965
Published: 2019-08-28
Description: A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that overtime can deplete system memory. When there is no system memory available, this can cause unexpected system behaviors and crashes. The vulnerability is due to the VSH process not being properly deleted when a remote management connection to the device is disconnected. An attacker could exploit this vulnerability by repeatedly performing a remote management connection to the device and terminating the connection in an unexpected manner. A successful exploit could allow the attacker to cause the VSH processes to fail to delete, which can lead to a system-wide denial of service (DoS) condition. The attacker must have valid user credentials to log in to the device using the remote management connection.
CVSS Score: 7.7 (HIGH)
CWE: CWE-400, CWE-772
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-memleak-dos; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-memleak-dos
CVE: CVE-2019-10051
Published: 2019-08-28
Description: An issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an unsafe "Some(sfcm) => { ft.new_chunk }" item, then the program enters an smb/files.rs error condition and crashes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://github.com/OISF/suricata/pull/3734; https://redmine.openinfosecfoundation.org/issues/2896; https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/
CVE: CVE-2019-10052
Published: 2019-08-28
Description: An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to access a part of a DHCP packet. At this point, the Rust environment runs into a panic in parse_clientid_option in the dhcp/parser.rs file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-707
References: https://redmine.openinfosecfoundation.org/issues/2902; https://redmine.openinfosecfoundation.org/issues/2947; https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/
CVE: CVE-2019-14694
Published: 2019-08-28
Description: A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be triggered due to a race condition when handling IRP_MJ_CLEANUP requests in the minifilter for directory change notifications. This allows an attacker to cause a denial of service (BSOD) when an executable is run inside the container.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-416
References: http://rce4fun.blogspot.com/2019/08/comodo-antivirus-sandbox-race-condition.html; https://github.com/SouhailHammou/Exploits/blob/master/CVE-2019-14694%20-%20Comodo%20AV%20Sandbox%20Race%20Condition%20UAF/comodo_av_uaf_poc.c; http://rce4fun.blogspot.com/2019/08/comodo-antivirus-sandbox-race-condition.html
CVE: CVE-2019-10054
Published: 2019-08-28
Description: An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for the length of reply.data. It causes an invalid memory access and the program crashes within the nfs/nfs3.rs file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-191
References: https://redmine.openinfosecfoundation.org/issues/2943; https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/; https://redmine.openinfosecfoundation.org/issues/2943
CVE: CVE-2019-10055
Published: 2019-08-28
Description: An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and part2, leading to a crash within the ftp/mod.rs file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-617
References: https://redmine.openinfosecfoundation.org/issues/2949; https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/; https://redmine.openinfosecfoundation.org/issues/2949
CVE: CVE-2019-10056
Published: 2019-08-28
Description: An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function DecodeEthernet in decode-ethernet.c is executed a second time. At this point, the algorithm cuts the first part of the packet and doesn't determine the current length. Specifically, if the packet is exactly 28 long, in the first iteration it subtracts 14 bytes. Then, it is working with a packet length of 14. At this point, the case distinction says it is a valid packet. After that it casts the packet, but this packet has no type, and the program crashes at the type case distinction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://redmine.openinfosecfoundation.org/issues/2946; https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/; https://redmine.openinfosecfoundation.org/issues/2946
CVE: CVE-2019-15752
Published: 2019-08-28
Description: Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732, CWE-732
References: http://packetstormsecurity.com/files/157404/Docker-Credential-Wincred.exe-Privilege-Escalation.html; https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E; https://medium.com/%40morgan.henry.roman/elevation-of-privilege-in-docker-for-windows-2fd8450b478e
CVE: CVE-2019-15753
Published: 2019-08-28
Description: In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instances belonging to other tenants sharing the same network. Only deployments using the linuxbridge backend are affected. This occurs in PyRoute2.add() in internal/command/ip/linux/impl_pyroute2.py.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-770
References: http://www.openwall.com/lists/oss-security/2019/08/29/2; https://launchpad.net/bugs/1837252; https://review.opendev.org/672834
CVE: CVE-2019-10057
Published: 2019-08-28
Description: Various Lexmark products have CSRF.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://support.lexmark.com/index?page=content&id=TE921&locale=EN&userlocale=EN_US; http://support.lexmark.com/index?page=content&id=TE921&locale=EN&userlocale=EN_US
CVE: CVE-2019-10059
Published: 2019-08-28
Description: The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-254
References: http://support.lexmark.com/index?page=content&id=TE923&locale=EN&userlocale=EN_US; http://support.lexmark.com/index?page=content&id=TE923&locale=EN&userlocale=EN_US
CVE: CVE-2019-9930
Published: 2019-08-28
Description: Various Lexmark products have an Integer Overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://support.lexmark.com/index?page=content&id=TE920&locale=EN&userlocale=EN_US; http://support.lexmark.com/index?page=content&id=TE920&locale=EN&userlocale=EN_US
CVE: CVE-2019-9931
Published: 2019-08-28
Description: Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device.
CVSS Score: 7.5 (HIGH)
References: http://support.lexmark.com/index?page=content&id=TE919&locale=EN&userlocale=EN_US; http://support.lexmark.com/index?page=content&id=TE919&locale=EN&userlocale=EN_US
CVE: CVE-2019-9932
Published: 2019-08-28
Description: Various Lexmark products have a Buffer Overflow (issue 2 of 3).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://support.lexmark.com/index?page=content&id=TE920&locale=EN&userlocale=EN_US; http://support.lexmark.com/index?page=content&id=TE920&locale=EN&userlocale=EN_US
CVE: CVE-2019-9933
Published: 2019-08-28
Description: Various Lexmark products have a Buffer Overflow (issue 3 of 3).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://support.lexmark.com/index?page=content&id=TE920&locale=EN&userlocale=EN_US; http://support.lexmark.com/index?page=content&id=TE920&locale=EN&userlocale=EN_US
CVE: CVE-2017-18594
Published: 2019-08-29
Description: nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.
CVSS Score: 7.5 (HIGH)
CWE: CWE-415
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html; https://github.com/AMatchandaHaystack/Research/blob/master/Nmap%26libsshDF
CVE: CVE-2019-10724
Published: 2019-08-29
Description: There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520T_Z370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642, AIO510-23ISH 6.0.1.8642, AIO520-22IKL 6.0.1.8642, AIO520-22IKU 6.0.1.8642, AIO520-24IKL 6.0.1.8642, AIO520-24IKU 6.0.1.8642, AIO520-27IKL 6.0.1.8642, AIO720-24IKB 6.0.1.8642, IdeaCentre 520S-23IKU 6.0.1.8642, ThinkCentre M700z 6.0.1.8642, ThinkCentre M800z 6.0.1.8642, ThinkCentre M810z 6.0.1.8642, ThinkCentre M818z 6.0.1.8642, ThinkCentre M900Z 6.0.1.8642, ThinkCentre M910z 6.0.1.8642, V410z(YT S4250) 6.0.1.8642, 330-14IKBR Win10:6.0.1.8652, 330-15IKBR Win10:6.0.1.8652, 330-15IKBR (Brazil) Win10:6.0.1.8652, 330-15IKBR Touch Win10:6.0.1.8652, 330-17IKBR Win10:6.0.1.8652, YOGA 730-13IKB Win10:6.0.1.8644, YOGA 730-15IKB Win10:6.0.1.8644, ThinkPad L560 6.0.1.8644 and 6.0.1.8652, ThinkPad L570 6.0.1.8644 and 6.0.1.8652, ThinkPad P50 6.0.1.8642, ThinkPad P50s 6.0.1.8642, ThinkPad P51s (20Jx, 20Kx) 6.0.1.8642, ThinkPad P51s (20Hx) 6.0.1.8642, ThinkPad P52s 6.0.1.8642, ThinkPad P70 6.0.1.8642, ThinkPad T25 6.0.1.8642, ThinkPad T460s 6.0.1.8642, ThinkPad T470 6.0.1.8642, ThinkPad T470s 6.0.1.8642, ThinkPad T480 6.0.1.8642, ThinkPad T480s 6.0.1.8642, ThinkPad T560 6.0.1.8642, ThinkPad T570 6.0.1.8642, ThinkPad T580 6.0.1.8642, ThinkPad X1 Carbon 8.66.76.72 and 8.66.68.54, ThinkPad X1 Carbon 6th 6.0.1.8642, ThinkPad X1 Carbon, X1 Yoga 8.66.62.92 and 8.66.62.54, ThinkPad X1 Tablet (20Gx) 6.0.1.8642, ThinkPad X1 Tablet (20Jx) 6.0.1.8642, ThinkPad X1 Tablet Gen 3 6.0.1.8642, ThinkPad X1 Yoga (20Jx) 8.66.88.60, ThinkPad X1 Yoga 3rd 6.0.1.8642, ThinkPad X280 6.0.1.8642, ThinkPad Yoga 260, S1 8.66.62.92 and 8.66.62.54.
CVSS Score: 6.5 (MEDIUM)
References: https://lenovomobilesupport.lenovo.com/us/en/product_security/home; https://support.lenovo.com/us/en/solutions/LEN-26251; https://lenovomobilesupport.lenovo.com/us/en/product_security/home
CVE: CVE-2017-14201
Published: 2019-08-29
Description: Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://docs.zephyrproject.org/1.14.0/releases/release-notes-1.14.html; https://github.com/zephyrproject-rtos/zephyr/pull/13260; https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-17
CVE: CVE-2017-14202
Published: 2019-08-29
Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://docs.zephyrproject.org/1.14.0/releases/release-notes-1.14.html; https://github.com/zephyrproject-rtos/zephyr/pull/13048; https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-18
CVE: CVE-2019-11060
Published: 2019-08-29
Description: The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause a Denial of Service (DoS) by sending headers very slowly to keep HTTP or HTTPS connections and associated resources alive for a long period of time. CVSS 3.0 Base score 7.4 (Availability impacts). CVSS vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770
References: http://surl.twcert.org.tw/aarVJ; https://tvn.twcert.org.tw/taiwanvn/TVN-201906002; https://www.exploit-db.com/exploits/46720
CVE: CVE-2019-11061
Published: 2019-08-29
Description: A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 (Confidentiality, Integrity and Availability impacts). CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306
References: http://surl.twcert.org.tw/5df6x; https://github.com/tim124058/ASUS-SmartHome-Exploit/; https://tvn.twcert.org.tw/taiwanvn/TVN-201906003
CVE: CVE-2019-11063
Published: 2019-08-29
Description: A broken access control vulnerability in SmartHome app (Android versions up to 3.0.42_190515, ios versions up to 2.0.22) allows an attacker in the same local area network to list user accounts and control IoT devices that connect with its gateway (HG100) via http://[target]/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 (Confidentiality, Integrity and Availability impacts). CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306
References: http://surl.twcert.org.tw/5LWQJ; https://github.com/tim124058/ASUS-SmartHome-Exploit/; https://tvn.twcert.org.tw/taiwanvn/TVN-201908014
CVE: CVE-2019-11064
Published: 2019-08-29
Description: A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get the administrator’s account and password in plain text via cgibin/ExportSettings.cgi?Export=1 without any authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-287
References: http://surl.twcert.org.tw/gCDQN; https://gist.github.com/keniver/f5155b42eb278ec0273b83565b64235b#file-androvideo-advan-vd-1-multiple-vulnerabilities-md; https://tvn.twcert.org.tw/taiwanvn/TVN-201906005
CVE: CVE-2019-11245
Published: 2019-08-29
Description: In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (root) on container restart, or if the image was previously pulled to the node. If the pod specified mustRunAsNonRoot: true, the kubelet will refuse to start the container as root. If the pod did not specify mustRunAsNonRoot: true, the kubelet will run the container as uid 0.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-703, CWE-264
References: https://github.com/kubernetes/kubernetes/issues/78308; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/kubernetes/kubernetes/issues/78308
CVE: CVE-2019-11246
Published: 2019-08-29
Description: The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. Kubernetes affected versions include versions prior to 1.12.9, versions prior to 1.13.6, versions prior to 1.14.2, and versions 1.1, 1.2, 1.4, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-61, CWE-22
References: https://github.com/kubernetes/kubernetes/pull/76788; https://groups.google.com/forum/#%21topic/kubernetes-security-announce/NLs2TGbfPdo; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-11247
Published: 2019-08-29
Description: The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings within the namespace, meaning that a user with access only to a resource in one namespace could create, view update or delete the cluster-scoped resource (according to their namespace role privileges). Kubernetes affected versions include versions prior to 1.13.9, versions prior to 1.14.5, versions prior to 1.15.2, and versions 1.7, 1.8, 1.9, 1.10, 1.11, 1.12.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-863
References: https://access.redhat.com/errata/RHBA-2019:2816; https://access.redhat.com/errata/RHBA-2019:2824; https://access.redhat.com/errata/RHSA-2019:2690
CVE: CVE-2019-11248
Published: 2019-08-29
Description: The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10 are affected. The issue is of medium severity, but not exposed by the default configuration.
CVSS Score: 8.2 (HIGH)
CWE: CWE-419, CWE-862
References: https://github.com/kubernetes/kubernetes/issues/81023; https://groups.google.com/d/msg/kubernetes-security-announce/pKELclHIov8/BEDtRELACQAJ; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/