CVE-2019-11248

CVE Enrichment

CVSS: 8.2 HIGH
EPSS: 75.06%
EPSS Percentile: 99.50%
CISA KEV: Not listed

Description

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10 are affected. The issue is of medium severity, but not exposed by the default configuration.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: jordan@liggitt.net
Published: 29-Aug-2019 08:15
Last Modified: 17-Jun-2026 09:12
EPSS Date: 2026-10-10
CWE: CWE-419, CWE-862

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:N /
                            A:L

Affected Products / Versions

kubernetes / kubernetes
Version / affected range: * · before (exclusive) 1.12.10
cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.0
cpe:2.3:a:kubernetes:kubernetes:1.13.0:-:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.0
cpe:2.3:a:kubernetes:kubernetes:1.13.0:alpha0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.0
cpe:2.3:a:kubernetes:kubernetes:1.13.0:alpha1:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.0
cpe:2.3:a:kubernetes:kubernetes:1.13.0:alpha2:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.0
cpe:2.3:a:kubernetes:kubernetes:1.13.0:alpha3:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.0
cpe:2.3:a:kubernetes:kubernetes:1.13.0:beta0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.0
cpe:2.3:a:kubernetes:kubernetes:1.13.0:beta1:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.0
cpe:2.3:a:kubernetes:kubernetes:1.13.0:beta2:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.0
cpe:2.3:a:kubernetes:kubernetes:1.13.0:rc1:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.0
cpe:2.3:a:kubernetes:kubernetes:1.13.0:rc2:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.1
cpe:2.3:a:kubernetes:kubernetes:1.13.1:-:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.1
cpe:2.3:a:kubernetes:kubernetes:1.13.1:beta0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.2
cpe:2.3:a:kubernetes:kubernetes:1.13.2:-:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.2
cpe:2.3:a:kubernetes:kubernetes:1.13.2:beta0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.3
cpe:2.3:a:kubernetes:kubernetes:1.13.3:-:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.3
cpe:2.3:a:kubernetes:kubernetes:1.13.3:beta0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.4
cpe:2.3:a:kubernetes:kubernetes:1.13.4:-:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.4
cpe:2.3:a:kubernetes:kubernetes:1.13.4:beta0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.5
cpe:2.3:a:kubernetes:kubernetes:1.13.5:-:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.5
cpe:2.3:a:kubernetes:kubernetes:1.13.5:beta0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.6
cpe:2.3:a:kubernetes:kubernetes:1.13.6:-:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.6
cpe:2.3:a:kubernetes:kubernetes:1.13.6:beta0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.7
cpe:2.3:a:kubernetes:kubernetes:1.13.7:-:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.7
cpe:2.3:a:kubernetes:kubernetes:1.13.7:beta.0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.13.8
cpe:2.3:a:kubernetes:kubernetes:1.13.8:beta.0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.0
cpe:2.3:a:kubernetes:kubernetes:1.14.0:-:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.0
cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.0
cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha1:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.0
cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha2:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.0
cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha3:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.0
cpe:2.3:a:kubernetes:kubernetes:1.14.0:beta0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.0
cpe:2.3:a:kubernetes:kubernetes:1.14.0:beta1:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.0
cpe:2.3:a:kubernetes:kubernetes:1.14.0:beta2:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.0
cpe:2.3:a:kubernetes:kubernetes:1.14.0:rc1:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.1
cpe:2.3:a:kubernetes:kubernetes:1.14.1:-:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.1
cpe:2.3:a:kubernetes:kubernetes:1.14.1:beta0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.2
cpe:2.3:a:kubernetes:kubernetes:1.14.2:-:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.2
cpe:2.3:a:kubernetes:kubernetes:1.14.2:beta0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.3
cpe:2.3:a:kubernetes:kubernetes:1.14.3:-:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.3
cpe:2.3:a:kubernetes:kubernetes:1.14.3:beta0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.14.4
cpe:2.3:a:kubernetes:kubernetes:1.14.4:beta.0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.15.0
cpe:2.3:a:kubernetes:kubernetes:1.15.0:alpha0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.15.0
cpe:2.3:a:kubernetes:kubernetes:1.15.0:alpha1:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.15.0
cpe:2.3:a:kubernetes:kubernetes:1.15.0:alpha2:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.15.0
cpe:2.3:a:kubernetes:kubernetes:1.15.0:alpha3:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.15.0
cpe:2.3:a:kubernetes:kubernetes:1.15.0:beta0:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.15.0
cpe:2.3:a:kubernetes:kubernetes:1.15.0:beta1:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.15.0
cpe:2.3:a:kubernetes:kubernetes:1.15.0:beta2:*:*:*:*:*:*
kubernetes / kubernetes
Version / affected range: 1.15.0
cpe:2.3:a:kubernetes:kubernetes:1.15.0:rc1:*:*:*:*:*:*

References

Last enrichment sync: 11-Oct-2026 12:33
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

Similar risks were recognized and addressed by other CNCF projects, such as Kubernetes, which resolved related vulnerabilities, for example CVE-2019-11248. Researchers Find 336,000 Internet-Exposed Prometheus Servers and Exporters

People (4)

Vendors (1)

Products (14)

Tools (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.