CVE-2015-7528

MEDIUM

Kubernetes <1.2.0-alpha.5 - Info Disclosure

Title source: llm
STIX 2.1

Description

Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name.

References (5)

Core 5
Core References
Issue Tracking x_refsource_confirm
https://github.com/openshift/origin/pull/6113
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-2615.html
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2015:2544
Issue Tracking x_refsource_confirm
https://github.com/kubernetes/kubernetes/pull/17886

Scores

CVSS v3 5.3
EPSS 0.0208
EPSS Percentile 79.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (4)
kubernetes/kubernetes < 1.2.0
kubernetes/kubernetes 0 - 1.2.0Go
redhat/openshift 3.0
redhat/openshift 3.1
Published Apr 11, 2016
Tracked Since Feb 18, 2026