H1-1378175 — Vulnetix

H1-1378175 PUBLISHED CVSS 7.599999904632568 HIGH

Ingress-nginx annotation injection allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces

Risk Scores

CVSS 3.1

7.599999904632568

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Exploit Intelligence

Ingress-nginx annotation injection allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces (hackerone)
Ingress-nginx annotation injection allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces (hackerone)
cve_db.json (github-poc)

Timeline

Aug 13, 2022 CVE Published
Aug 13, 2022 PoC Published

References

Ingress-nginx annotation injection allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›