Description (CNA)
Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Kubernetes / k8s.gcr.io/defaultbackend | affected defaultbackend before 1.5 |
CWE
CWE-215
References
ADP enrichment
No English description supplied.