← Database

CVE-2025-24884

N/A CVSS: N/A Published: 2025-01-29 Modified: 2026-06-17

Description

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16.

Affected Platforms

Unknown

Weakness Type

CWE-200, CWE-212, CWE-532

References