| id: GO-2025-3645 |
| modules: |
| - module: k8s.io/kubernetes |
| versions: |
| - introduced: 1.12.0 |
| - fixed: 1.12.5 |
| - introduced: 1.13.0 |
| - fixed: 1.13.1 |
| vulnerable_at: 1.13.1-beta.0 |
| summary: Kubernetes did not effectively clear service account credentials in k8s.io/kubernetes |
| cves: |
| - CVE-2019-11243 |
| ghsas: |
| - GHSA-gc2p-g4fg-29vh |
| references: |
| - advisory: https://github.com/advisories/GHSA-gc2p-g4fg-29vh |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2019-11243 |
| - web: https://github.com/kubernetes/kubernetes/issues/76797 |
| - web: https://security.netapp.com/advisory/ntap-20190509-0002 |
| source: |
| id: GHSA-gc2p-g4fg-29vh |
| created: 2025-04-29T12:46:26.886806-04:00 |
| review_status: UNREVIEWED |
