Security Advisory

CVE-2019-11243

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-04-22 14:54:15

Last updated 2024-08-04 22:48:09

Assigner kubernetes

CVSS score 3.1

State PUBLISHED

Description

In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (bearer token, username/password, and client certificate/key data). In the affected versions, rest.AnonymousClientConfig() did not effectively clear service account credentials loaded using rest.InClusterConfig()

← Browse all CVEs View on cve.org ↗