Описание
Unauthorized disclosure of sensitive data: Any user with GET or LIST permissions on BundleDeployment resources could retrieve Helm values containing credentials or other secrets.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps/xenial | needs-triage | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| questing | DNE | |
| upstream | needs-triage |
Показывать по
10
EPSS
Процентиль: 4%
0.00019
Низкий
7.7 High
CVSS3
Связанные уязвимости
CVSS3: 7.7
nvd
5 месяцев назад
Unauthorized disclosure of sensitive data: Any user with `GET` or `LIST` permissions on `BundleDeployment` resources could retrieve Helm values containing credentials or other secrets.
CVSS3: 7.7
github
5 месяцев назад
Rancher Fleet Helm Values are stored inside BundleDeployment in plain text
EPSS
Процентиль: 4%
0.00019
Низкий
7.7 High
CVSS3