7.6
High
CVE-2021-25742 A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the…
Description
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kubernetes ingress-nginx 1.0 | earliest → 1.0.0 | No fix stated |
| Kubernetes ingress-nginx 0.49 | earliest → 0.49.0 | No fix stated |
Other CVEs of Kubernetes ingress-nginx
The 4 CVEs of Kubernetes ingress-nginx →
CVE-2021-25748
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a…
7.6
High
CVE-2021-25746
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use…
7.6
High
CVE-2021-25745
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the…
7.6
High