Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-24884

kube-audit-rest's example logging configuration could disclose secret values in the audit log

Description

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

RichardoC kube-audit-rest

  • < 1.0.16affected

References