SSA-817234: Multiple Kubernetes Ingress NGINX Controller Vulnerabilities in Insights Hub Private Cloud
Insights Hub Private Cloud is affected by multiple vulnerabilities in Ingress NGINX Controller for Kubernetes. These vulnerabilities could lead to arbitrary code execution in the context of the ingress-nginx controller, or disclosure of Secrets accessible to the controller, or denial of service condition. Siemens has released a new version for Insights Hub Private Cloud and recommends to update to the latest version.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-24514US | — | Exploit | ||
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into ngin… | ||||
| CVE-2025-24513US | — | — | ||
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admissio… | ||||
| CVE-2025-1974US | — | Exploit | ||
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the… | ||||
| CVE-2025-1098US | — | Exploit | ||
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject… | ||||
| CVE-2025-1097US | — | Exploit | ||
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (5)
- BehobenInsights Hub Private Cloud
Contact customer support to receive patch and update information
- BehobenInsights Hub Private Cloud
Contact customer support to receive patch and update information
- BehobenInsights Hub Private Cloud
Contact customer support to receive patch and update information
- BehobenInsights Hub Private Cloud
Contact customer support to receive patch and update information
- BehobenInsights Hub Private Cloud
Contact customer support to receive patch and update information
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan