Kubernetes Kube-State-Metrics vulnerabilities

1 known vulnerability affecting kubernetes/kube-state-metrics.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2019-10223MEDIUMCVSS 6.5v1.7.0v1.7.12019-11-05
CVE-2019-10223 [MEDIUM] CWE-200 CVE-2019-10223: A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimenta A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that enabled annotations to be exposed as metrics. By default, the kube-state-metrics metrics only expose metadata about Secrets. However, a combination of the default `kubectl` behavior and this new feature c
nvd