CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-25742

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 67.2%

CVSS Severity

CVSS v3 Score 7.6

CVSS v2 Score 5.5

References

Products affected by CVE-2021-25742

Kubernetes » Ingress-Nginx » Version: N/A

cpe:2.3:a:kubernetes:ingress-nginx:-
Kubernetes » Ingress-Nginx » Version: 0.10.0

cpe:2.3:a:kubernetes:ingress-nginx:0.10.0
Kubernetes » Ingress-Nginx » Version: 0.10.1

cpe:2.3:a:kubernetes:ingress-nginx:0.10.1
Kubernetes » Ingress-Nginx » Version: 0.10.2

cpe:2.3:a:kubernetes:ingress-nginx:0.10.2
Kubernetes » Ingress-Nginx » Version: 0.11.0

cpe:2.3:a:kubernetes:ingress-nginx:0.11.0
Kubernetes » Ingress-Nginx » Version: 0.12.0

cpe:2.3:a:kubernetes:ingress-nginx:0.12.0
Kubernetes » Ingress-Nginx » Version: 0.13.0

cpe:2.3:a:kubernetes:ingress-nginx:0.13.0
Kubernetes » Ingress-Nginx » Version: 0.14.0

cpe:2.3:a:kubernetes:ingress-nginx:0.14.0
Kubernetes » Ingress-Nginx » Version: 0.15.0

cpe:2.3:a:kubernetes:ingress-nginx:0.15.0
Kubernetes » Ingress-Nginx » Version: 0.16.0

cpe:2.3:a:kubernetes:ingress-nginx:0.16.0
Kubernetes » Ingress-Nginx » Version: 0.16.1

cpe:2.3:a:kubernetes:ingress-nginx:0.16.1
Kubernetes » Ingress-Nginx » Version: 0.16.2

cpe:2.3:a:kubernetes:ingress-nginx:0.16.2
Kubernetes » Ingress-Nginx » Version: 0.17.0

cpe:2.3:a:kubernetes:ingress-nginx:0.17.0
Kubernetes » Ingress-Nginx » Version: 0.17.1

cpe:2.3:a:kubernetes:ingress-nginx:0.17.1
Kubernetes » Ingress-Nginx » Version: 0.18.0

cpe:2.3:a:kubernetes:ingress-nginx:0.18.0
Kubernetes » Ingress-Nginx » Version: 0.19.0

cpe:2.3:a:kubernetes:ingress-nginx:0.19.0
Kubernetes » Ingress-Nginx » Version: 0.20.0

cpe:2.3:a:kubernetes:ingress-nginx:0.20.0
Kubernetes » Ingress-Nginx » Version: 0.21.0

cpe:2.3:a:kubernetes:ingress-nginx:0.21.0
Kubernetes » Ingress-Nginx » Version: 0.22.0

cpe:2.3:a:kubernetes:ingress-nginx:0.22.0
Kubernetes » Ingress-Nginx » Version: 0.23.0

cpe:2.3:a:kubernetes:ingress-nginx:0.23.0
Kubernetes » Ingress-Nginx » Version: 0.24.0

cpe:2.3:a:kubernetes:ingress-nginx:0.24.0
Kubernetes » Ingress-Nginx » Version: 0.24.1

cpe:2.3:a:kubernetes:ingress-nginx:0.24.1
Kubernetes » Ingress-Nginx » Version: 0.25.0

cpe:2.3:a:kubernetes:ingress-nginx:0.25.0
Kubernetes » Ingress-Nginx » Version: 0.25.1

cpe:2.3:a:kubernetes:ingress-nginx:0.25.1
Kubernetes » Ingress-Nginx » Version: 0.26.0

cpe:2.3:a:kubernetes:ingress-nginx:0.26.0
Kubernetes » Ingress-Nginx » Version: 0.26.1

cpe:2.3:a:kubernetes:ingress-nginx:0.26.1
Kubernetes » Ingress-Nginx » Version: 0.26.2

cpe:2.3:a:kubernetes:ingress-nginx:0.26.2
Kubernetes » Ingress-Nginx » Version: 0.27.0

cpe:2.3:a:kubernetes:ingress-nginx:0.27.0
Kubernetes » Ingress-Nginx » Version: 0.27.1

cpe:2.3:a:kubernetes:ingress-nginx:0.27.1
Kubernetes » Ingress-Nginx » Version: 0.28.0

cpe:2.3:a:kubernetes:ingress-nginx:0.28.0
Kubernetes » Ingress-Nginx » Version: 0.29.0

cpe:2.3:a:kubernetes:ingress-nginx:0.29.0
Kubernetes » Ingress-Nginx » Version: 0.30.0

cpe:2.3:a:kubernetes:ingress-nginx:0.30.0
Kubernetes » Ingress-Nginx » Version: 0.31.0

cpe:2.3:a:kubernetes:ingress-nginx:0.31.0
Kubernetes » Ingress-Nginx » Version: 0.31.1

cpe:2.3:a:kubernetes:ingress-nginx:0.31.1
Kubernetes » Ingress-Nginx » Version: 0.32.0

cpe:2.3:a:kubernetes:ingress-nginx:0.32.0
Kubernetes » Ingress-Nginx » Version: 0.33.0

cpe:2.3:a:kubernetes:ingress-nginx:0.33.0
Kubernetes » Ingress-Nginx » Version: 0.34.0

cpe:2.3:a:kubernetes:ingress-nginx:0.34.0
Kubernetes » Ingress-Nginx » Version: 0.34.1

cpe:2.3:a:kubernetes:ingress-nginx:0.34.1
Kubernetes » Ingress-Nginx » Version: 0.35.0

cpe:2.3:a:kubernetes:ingress-nginx:0.35.0
Kubernetes » Ingress-Nginx » Version: 0.40.0

cpe:2.3:a:kubernetes:ingress-nginx:0.40.0
Kubernetes » Ingress-Nginx » Version: 0.40.1

cpe:2.3:a:kubernetes:ingress-nginx:0.40.1
Kubernetes » Ingress-Nginx » Version: 0.40.2

cpe:2.3:a:kubernetes:ingress-nginx:0.40.2
Kubernetes » Ingress-Nginx » Version: 0.41.0

cpe:2.3:a:kubernetes:ingress-nginx:0.41.0
Kubernetes » Ingress-Nginx » Version: 0.41.1

cpe:2.3:a:kubernetes:ingress-nginx:0.41.1
Kubernetes » Ingress-Nginx » Version: 0.41.2

cpe:2.3:a:kubernetes:ingress-nginx:0.41.2
Kubernetes » Ingress-Nginx » Version: 0.42.0

cpe:2.3:a:kubernetes:ingress-nginx:0.42.0
Kubernetes » Ingress-Nginx » Version: 0.43.0

cpe:2.3:a:kubernetes:ingress-nginx:0.43.0
Kubernetes » Ingress-Nginx » Version: 0.44.0

cpe:2.3:a:kubernetes:ingress-nginx:0.44.0
Kubernetes » Ingress-Nginx » Version: 0.45.0

cpe:2.3:a:kubernetes:ingress-nginx:0.45.0
Kubernetes » Ingress-Nginx » Version: 0.46.0

cpe:2.3:a:kubernetes:ingress-nginx:0.46.0
Kubernetes » Ingress-Nginx » Version: 0.47.0

cpe:2.3:a:kubernetes:ingress-nginx:0.47.0
Kubernetes » Ingress-Nginx » Version: 0.48.1

cpe:2.3:a:kubernetes:ingress-nginx:0.48.1
Kubernetes » Ingress-Nginx » Version: 0.49.0

cpe:2.3:a:kubernetes:ingress-nginx:0.49.0
Kubernetes » Ingress-Nginx » Version: 0.9.0

cpe:2.3:a:kubernetes:ingress-nginx:0.9.0
Kubernetes » Ingress-Nginx » Version: 0.9.1

cpe:2.3:a:kubernetes:ingress-nginx:0.9.1
Kubernetes » Ingress-Nginx » Version: 0.9.2

cpe:2.3:a:kubernetes:ingress-nginx:0.9.2
Kubernetes » Ingress-Nginx » Version: 0.9.3

cpe:2.3:a:kubernetes:ingress-nginx:0.9.3
Kubernetes » Ingress-Nginx » Version: 0.9.4

cpe:2.3:a:kubernetes:ingress-nginx:0.9.4
Kubernetes » Ingress-Nginx » Version: 0.9.5

cpe:2.3:a:kubernetes:ingress-nginx:0.9.5
Kubernetes » Ingress-Nginx » Version: 0.9.6

cpe:2.3:a:kubernetes:ingress-nginx:0.9.6
Kubernetes » Ingress-Nginx » Version: 1.0.0

cpe:2.3:a:kubernetes:ingress-nginx:1.0.0
Netapp » Trident » Version: N/A

cpe:2.3:a:netapp:trident:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-25742

Products

Pricing

Contact Us