VYPR
← All advisories
High severity8.5NVD Advisory· Published Jun 5, 2019· Updated Jun 17, 2026

CVE-2019-12494

CVE-2019-12494

Description

In Gardener before 0.20.0, incorrect access control in seed clusters allows information disclosure by sending HTTP GET requests from one's own shoot clusters to foreign shoot clusters. This occurs because traffic from shoot to seed via the VPN endpoint is not blocked.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Gardener/Gardener2 versions
    cpe:2.3:a:gardener:gardener:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gardener:gardener:*:*:*:*:*:*:*:*range: <0.20.0
    • (no CPE)range: <0.20.0
  • Gardener/Gardenerdescription

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.