Description
Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path (/opt/bitnami/*/secrets) that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets by accessing specific URLs if the application is exposed externally. The issue affects deployments using the default value of usePasswordFiles=true, which mounts secrets as files into the container filesystem.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
VMware bitnamicharts/appsmith
Default version status: unaffected
21.2.0 to ≤ 22.0.4affected
VMware bitnamicharts/drupal
Default version status: unaffected
5.2.0 to < 6.0.19affected
VMware bitnamicharts/wordpress
Default version status: unaffected
24.2.0 to < 25.0.4affected