CVE-2019-3682 - Insecure API port exposed to all Master Node guest containers

HIGH

Insecure API port exposed to all Master Node guest containers

Published Jan 17, 2020

8.4

HIGH

CVSS 3.1

EPSS 0.31%

The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
docker-kubic	affected	<17.09.1_ce-7.6.1

No remediation recorded yet.

Weaknesses (1)

CWE-668

Link	Providers	Tags
https://bugzilla.suse.com/show_bug.cgi?id=1121148		x_refsource_CONFIRMPermissions Required

No recorded changes yet.

Sources

Status PUBLISHED

Assigner suse

Published Jan 17, 2020

Updated Sep 17, 2024

Reserved Jan 3, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a