Back to Database
Status published
Medium
CVE-2025-24884
kube-audit-rest's example logging configuration could disclose secret values in the audit log
Vulnerability Description
kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-24884
Credits & Attribution
No credits recorded in the NVD database.
References
Affected Vendor
RichardoC
View all reports →Affected Software
kube-audit-rest
Vulnerable Versions:
< 1.0.16
Timeline
Official Publish:
January 29th, 2025
Last Modified:
January 31st, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
MITRE ATT&CK TTPs
T1213
Data from Information Repositories
Collection
T1005
Data from Local System
Collection
T1552
Unsecured Credentials
Credential Access
T1041
Exfiltration Over C2 Channel
Exfiltration
T1555
Credentials from Password Stores
Credential Access
T1078
Valid Accounts
Persistence
T1562
Impair Defenses
Defense Evasion