Approved changes feed: RSS · Atom

cpe:2.3:a:kubernetes:kubernetes:1.15.4:beta0:*:*:*:*:*:*

part: a version: 1.15.4 update: beta0

VendorKubernetes (3ee05930-9e42-51b2-ad52-30832f573b15)
ProductKubernetes (1a2d2535-9ff1-599e-92b3-aa33ed592780)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:code.google/kubernetes purl2cpe 2026-06-01 10:13:27.661003
pkg:github/kubernetes/kubernetes purl2cpe 2026-06-01 10:13:27.661004

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11250 vulnerable 2026-06-03 14:39:32.573079 Kubernetes client-go logs authorization headers at debug verbosity levels
MEDIUM (4.7)
The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components (such as kube-apiserver) prior to v1.16.0, which make use of basic or bearer token authentication, and run at high verbosity levels, are affected.
Published: 2019-08-29T00:40:43.341Z
Updated: 2024-09-17T02:06:55.457Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.