CVE-2024-7646 - A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the ingress-nginx controller

Back Back to CVE browser

HIGH

A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the ingress-nginx controller

Published Aug 16, 2024

8.8

HIGH

CVSS 3.1

EPSS 27.02%

Description

A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.

Affected products

Vendor Kubernetes Product Ingress-Nginx Default
affected
Affected
- ≥ 0, < 1.10.4
- ≥ 1.11.0, < 1.11.2
Unaffected
- 1.10.4
- 1.11.2

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Kubernetes	Ingress-Nginx	affected	Affected ≥ 0, < 1.10.4 ≥ 1.11.0, < 1.11.2 Unaffected 1.10.4 1.11.2

Vendor Kubernetes Product Ingress-Nginx Default
unknown
Affected
- ≥ 0, < 1.10.4
- 1.10.4
- ≥ 1.11.0, < 1.11.2
- 1.11.2

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Kubernetes	Ingress-Nginx	unknown	Affected ≥ 0, < 1.10.4 1.10.4 ≥ 1.11.0, < 1.11.2 1.11.2

Ecosystem	Package	Introduced	Fixed
Go	github.com/kubernetes/ingress-nginx	0	not fixed

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (6)

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2024/08/16/5
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48533		Advisory
https://github.com/kubernetes/ingress-nginx/pull/11719		patch
https://github.com/kubernetes/ingress-nginx/pull/11721		patch
https://github.com/kubernetes/kubernetes/issues/126744		issue-tracking
https://groups.google.com/g/kubernetes-security-announce/c/a1__cKjWkfA		mailing-list

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner kubernetes

Published Aug 16, 2024

Updated Aug 19, 2024

Reserved Aug 9, 2024

Link CVE-2024-7646

CISA Vulnrichment

Updated Aug 19, 2024

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-7646

Red Hat

No data

ENISA EUVD

Assigner kubernetes

Published Aug 16, 2024

Updated Aug 19, 2024

Link EUVD-2024-48533

GitHub

No data