CVE-2025-24884

kube-audit-rest <1.0.16 - Info Disclosure

Title source: llm

Description

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16.

Scores

EPSS 0.0006
EPSS Percentile 18.6%

Classification

CWE
CWE-212 CWE-532 CWE-200
Status draft

Affected Products (1)

RichardoC/kube-audit-rest < 0.0.0-20250205113217-9df8886b4819Go

Timeline

Published Jan 29, 2025
Tracked Since Feb 18, 2026