GHSA-mqf3-28j7-3mj6

Source

https://github.com/advisories/GHSA-mqf3-28j7-3mj6

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-mqf3-28j7-3mj6/GHSA-mqf3-28j7-3mj6.json

Aliases

• CVE-2015-7528

Published

2022-04-12T22:40:14Z

Modified

2023-11-08T03:58:00.306691Z

Details

Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name.

References

• https://nvd.nist.gov/vuln/detail/CVE-2015-7528
• https://github.com/kubernetes/kubernetes/pull/17886
• https://github.com/openshift/origin/pull/6113
• https://github.com/kubernetes/kubernetes/commit/afd56495a1052a3387b81df1786a8d0f51bc8671
• https://access.redhat.com/errata/RHSA-2015:2544
• https://access.redhat.com/errata/RHSA-2015:2615
• https://access.redhat.com/security/cve/CVE-2015-7528
• https://bugzilla.redhat.com/show_bug.cgi?id=1286745
• https://github.com/kubernetes/kubernetes
• https://github.com/kubernetes/kubernetes/releases/tag/v1.2.0-alpha.5
• https://rhn.redhat.com/errata/RHSA-2015-2615.html