CVE-2025-24884
kube-audit-rest <1.0.16 - Info Disclosure
Title source: llmDescription
kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16.
Scores
EPSS
0.0006
EPSS Percentile
18.6%
Classification
CWE
CWE-212
CWE-532
CWE-200
Status
draft
Affected Products (1)
RichardoC/kube-audit-rest
< 0.0.0-20250205113217-9df8886b4819Go
Timeline
Published
Jan 29, 2025
Tracked Since
Feb 18, 2026