onyx --cves cve-2020-8553
CVE-2020-8553
- score
- <0.1
- cvss
- 5.9
- epss
- 0.9%
- published
- 2020-07-29
- kev added
- —
- first seen
Kubernetes ingress-nginx prior to 0.28.0 contains a vulnerability caused by overwriting password files of ingress objects with hyphenated namespace or secret names, letting users with namespace and ingress creation rights overwrite passwords, exploit requires namespace and ingress creation permissions.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx