What is GHSA-mqf3-28j7-3mj6?

GHSA-mqf3-28j7-3mj6 is a security advisory published by GitHub Security Advisories with Medium severity. Information Exposure in Kubernetes

Which CVE IDs does GHSA-mqf3-28j7-3mj6 cover?

GHSA-mqf3-28j7-3mj6 covers the following CVE IDs: CVE-2015-7528. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mqf3-28j7-3mj6?

GHSA-mqf3-28j7-3mj6 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-mqf3-28j7-3mj6?

GHSA-mqf3-28j7-3mj6 affects 1 product, including: go/github.com/kubernetes/kubernetes:\u003c 1.2.0.

GHSA-mqf3-28j7-3mj6MediumCVSS 5.3

Information Exposure in Kubernetes

Vendor

GitHub Security Advisories

Published

April 12, 2022

Last Modified

February 13, 2023

🔗 CVE IDs covered (1)

CVE-2015-7528 →

📋 Description

Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name.

🎯 Affected products1

go/github.com/kubernetes/kubernetes:< 1.2.0

🔗 References (11)

https://nvd.nist.gov/vuln/detail/CVE-2015-7528
https://github.com/kubernetes/kubernetes/pull/17886
https://github.com/openshift/origin/pull/6113
https://github.com/kubernetes/kubernetes/commit/afd56495a1052a3387b81df1786a8d0f51bc8671
https://access.redhat.com/errata/RHSA-2015:2544
https://github.com/kubernetes/kubernetes/releases/tag/v1.2.0-alpha.5
https://access.redhat.com/errata/RHSA-2015:2615
https://access.redhat.com/security/cve/CVE-2015-7528
https://bugzilla.redhat.com/show_bug.cgi?id=1286745
https://rhn.redhat.com/errata/RHSA-2015-2615.html
https://github.com/advisories/GHSA-mqf3-28j7-3mj6