vulnerability

Red Hat OpenShift: CVE-2019-11252: kubernetes: credential leak in kube-controller-manager via error messages in mount failure logs and events for AzureFile and CephFS volumes

Name: Red Hat OpenShift: CVE-2019-11252: kubernetes: credential leak in kube-controller-manager via error messages in mount failure logs and events for AzureFile and CephFS volumes
Creator: Red Hat
Published: 2020-07-23T00:00:00.000Z
Keywords: CVE, CWE-209, Red Hat OpenShift, 2019, 11252, kubernetes, linuxrpm-upgrade-openshift, Severity 5

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

Jul 23, 2020

Added

Dec 29, 2020

Modified

Mar 30, 2026

Description

The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes.

Solution

linuxrpm-upgrade-openshift

References

CVE-2019-11252
https://attackerkb.com/topics/CVE-2019-11252
CWE-209
EUVD-EUVD-2019-2945
REDHAT-RHSA-2020:2412
REDHAT-RHSA-2020:2413
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2945

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report