Skip to content
OpenAdvisories
Critical SSA-817234 5 CVEs

SSA-817234: Multiple Kubernetes Ingress NGINX Controller Vulnerabilities in Insights Hub Private Cloud

Published Apr 8, 2025 · Updated Apr 8, 2025

Vendor: Siemens Product: Insights Hub Private Cloud

Summary

Insights Hub Private Cloud is affected by multiple vulnerabilities in Ingress NGINX Controller for Kubernetes. These vulnerabilities could lead to arbitrary code execution in the context of the
ingress-nginx controller, or disclosure of Secrets accessible to the controller, or denial of service condition.
Siemens has released a new version for Insights Hub Private Cloud and recommends to update to the latest version.

Vulnerabilities 5

  • Critical 9.8
    CVE-2025-1974 Public exploit Scanner template EPSS 99%

    ingress-nginx admission controller RCE escalation

    A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secret…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-1097 Public exploit Scanner template EPSS 37%

    ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingre…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-1098 Public exploit Scanner template EPSS 86%

    ingress-nginx controller - configuration injection via unsanitized mirror annotations

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-24514 Public exploit Scanner template EPSS 37%

    ingress-nginx controller - configuration injection via unsanitized auth-url annotation

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx …

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • Medium 4.8
    CVE-2025-24513

    ingress-nginx controller - auth secret file path traversal vulnerability

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the container. This…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go

Revision history

  1. #1

    Publication Date

References