Kubernetes ingress exposes sensitive information

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-1002104 · ADVISORY
• kubernetes/ingress-nginx · WEB
• kubernetes/ingress-nginx#3125 · WEB
• kubernetes/ingress-nginx commit d487a50 · WEB
• kubernetes/ingress-nginx · PACKAGE

k8s.io/ingress-nginx のその他の脆弱性

• CVE-2026-4342高 8.8A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. …
• CVE-2026-24514中 6.5A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service conditi…
• CVE-2026-24513低 3.1A security issue was discovered in ingress-nginx where the protection afforded by the `auth-url` Ingress annotation may not be effective in …
• CVE-2026-24512高 8.8A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject configuration into ng…
• CVE-2026-1580高 8.8A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to injec…