8x8 · Report #1607940
CVE-2019-11248 on http://█.█.█.█:9100/debug/pprof/goroutine
Validstatus
lowseverity
24upvotes
18 Jul 2022disclosed
Summary
@mr_k0anti reported to us an exposed debugging endpoint (/debug/pprof) over the unauthenticated Kubelet healthz port 9100. No sensitive information has been disclosed & the affected host belonged to our staging environment.
The issue has been rectified.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.