3 ms·
That's quite a terrifying CVE. > Multiple issues have been discovered in ingress-nginx that can result in arbitrary code execution in the context of the ingres
by IlikeKitties 2y ago
That's quite a terrifying CVE.
> Multiple issues have been discovered in ingress-nginx that can result in arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
Beyond that, it could likely be used to sniff out client secrets from other connections as well if the attacker is sophisticated enough.
- deleted 2y ago[deleted]