HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with…
mitre·CWE-791·Published 2025-10-08
HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress Controller are 3.0.16-ee1, 1.11.13-ee1, and 1.9.15-ee1.
HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress Controller are 3.0.16-ee1, 1.11.13-ee1, and 1.9.15-ee1.
HAProxy Kubernetes Ingress Controller antes de la versión 3.1.13, cuando se utiliza la bandera de característica config-snippets, acepta fragmentos de configuración de usuarios con permisos de creación/actualización. Esto puede resultar en la obtención de un secreto de token de entrada como respuesta. Las versiones corregidas de HAProxy Enterprise Kubernetes Ingress Controller son 3.0.16-ee1, 1.11.13-ee1 y 1.9.15-ee1.
| Version | Type | Source | Base | Exp | Impact | Vector |
|---|---|---|---|---|---|---|
| 3.1 | Primary | cve.org | 6.4 | — | — | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N |
| 3.1 | Primary | cve.org | 6.4 | — | — | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N |
| 3.1 | Secondary | NVD | 6.4 | 3.1 | 2.7 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N |