5.3
Medium
CVE-2018-1002104 Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus…
Description
Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| k8s.gcr.io/defaultbackend 1.5 | earliest → < 1.5 | 1.5 |