CVE-2019-11252: Kubernetes

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes.

Affected products

• Kubernetes Kubernetes: from 1.0.0, up to and including 1.17.0

Published 2020-07-23. Last modified 2026-06-17.