{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-11248.json" } ], "title": "kubernetes: /debug/pprof endpoint exposed on kubelet's healthz port", "tracking": { "current_release_date": "2026-01-13T21:25:51+00:00", "generator": { "date": "2026-01-13T21:25:51+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.15" } }, "id": "CVE-2019-11248", "initial_release_date": "2019-08-07T00:00:00+00:00", "revision_history": [ { "date": "2019-08-07T00:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2025-10-10T16:50:10+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-01-13T21:25:51+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 3.10", "product": { "name": "Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.10" } } } ], "category": "product_family", "name": "Red Hat OpenShift Container Platform 3.10" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 3.11", "product": { "name": "Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.11" } } } ], "category": "product_family", "name": "Red Hat OpenShift Container Platform 3.11" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 3.9", "product": { "name": "Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.9" } } } ], "category": "product_family", "name": "Red Hat OpenShift Container Platform 3.9" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4", "product": { "name": "Red Hat OpenShift Container Platform 4", "product_id": "red_hat_openshift_container_platform_4", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4" } } } ], "category": "product_family", "name": "Red Hat OpenShift Container Platform 4" }, { "branches": [ { "category": "product_name", "name": "Red Hat Storage 3", "product": { "name": "Red Hat Storage 3", "product_id": "red_hat_storage_3", "product_identification_helper": { "cpe": "cpe:/a:redhat:storage:3" } } } ], "category": "product_family", "name": "Red Hat Storage 3" }, { "category": "product_version", "name": "atomic-openshift-clients-redistributable", "product": { "name": "atomic-openshift-clients-redistributable", "product_id": "atomic-openshift-clients-redistributable", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients-redistributable" } } }, { "category": "product_version", "name": "atomic-openshift.src", "product": { "name": "atomic-openshift.src", "product_id": "atomic-openshift.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift?arch=src" } } }, { "category": "product_version", "name": "atomic-openshift-excluder", "product": { "name": "atomic-openshift-excluder", "product_id": "atomic-openshift-excluder", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-excluder" } } }, { "category": "product_version", "name": "atomic-openshift-clients", "product": { "name": "atomic-openshift-clients", "product_id": "atomic-openshift-clients", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients" } } }, { "category": "product_version", "name": "atomic-openshift", "product": { "name": "atomic-openshift", "product_id": "atomic-openshift", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift" } } }, { "category": "product_version", "name": "atomic-openshift-pod", "product": { "name": "atomic-openshift-pod", "product_id": "atomic-openshift-pod", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-pod" } } }, { "category": "product_version", "name": "atomic-openshift-node", "product": { "name": "atomic-openshift-node", "product_id": "atomic-openshift-node", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-node" } } }, { "category": "product_version", "name": "atomic-openshift-hyperkube", "product": { "name": "atomic-openshift-hyperkube", "product_id": "atomic-openshift-hyperkube", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-hyperkube" } } }, { "category": "product_version", "name": "atomic-openshift-tests", "product": { "name": "atomic-openshift-tests", "product_id": "atomic-openshift-tests", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-tests" } } }, { "category": "product_version", "name": "atomic-openshift-docker-excluder", "product": { "name": "atomic-openshift-docker-excluder", "product_id": "atomic-openshift-docker-excluder", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-docker-excluder" } } }, { "category": "product_version", "name": "atomic-openshift-template-service-broker", "product": { "name": "atomic-openshift-template-service-broker", "product_id": "atomic-openshift-template-service-broker", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-template-service-broker" } } }, { "category": "product_version", "name": "atomic-openshift-sdn-ovs", "product": { "name": "atomic-openshift-sdn-ovs", "product_id": "atomic-openshift-sdn-ovs", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-sdn-ovs" } } }, { "category": "product_version", "name": "atomic-openshift-hypershift", "product": { "name": "atomic-openshift-hypershift", "product_id": "atomic-openshift-hypershift", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-hypershift" } } }, { "category": "product_version", "name": "atomic-openshift-master", "product": { "name": "atomic-openshift-master", "product_id": "atomic-openshift-master", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-master" } } }, { "category": "product_version", "name": "atomic-openshift-service-catalog", "product": { "name": "atomic-openshift-service-catalog", "product_id": "atomic-openshift-service-catalog", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-service-catalog" } } }, { "category": "product_version", "name": "atomic-openshift-cluster-capacity", "product": { "name": "atomic-openshift-cluster-capacity", "product_id": "atomic-openshift-cluster-capacity", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-cluster-capacity" } } }, { "category": "product_version", "name": "atomic-openshift-federation-services", "product": { "name": "atomic-openshift-federation-services", "product_id": "atomic-openshift-federation-services", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-federation-services" } } }, { "category": "product_version", "name": "openshift-kube-controller-manager", "product": { "name": "openshift-kube-controller-manager", "product_id": "openshift-kube-controller-manager", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kube-controller-manager" } } }, { "category": "product_version", "name": "openshift-hyperkube", "product": { "name": "openshift-hyperkube", "product_id": "openshift-hyperkube", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube" } } }, { "category": "product_version", "name": "openshift-kube-scheduler", "product": { "name": "openshift-kube-scheduler", "product_id": "openshift-kube-scheduler", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kube-scheduler" } } }, { "category": "product_version", "name": "openshift-kube-apiserver", "product": { "name": "openshift-kube-apiserver", "product_id": "openshift-kube-apiserver", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kube-apiserver" } } }, { "category": "product_version", "name": "openshift.src", "product": { "name": "openshift.src", "product_id": "openshift.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift?arch=src" } } }, { "category": "product_version", "name": "openshift-clients", "product": { "name": "openshift-clients", "product_id": "openshift-clients", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-clients" } } }, { "category": "product_version", "name": "openshift-clients-redistributable", "product": { "name": "openshift-clients-redistributable", "product_id": "openshift-clients-redistributable", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-clients-redistributable" } } }, { "category": "product_version", "name": "openshift-kubelet", "product": { "name": "openshift-kubelet", "product_id": "openshift-kubelet", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kubelet" } } }, { "category": "product_version", "name": "heketi-client", "product": { "name": "heketi-client", "product_id": "heketi-client", "product_identification_helper": { "purl": "pkg:rpm/redhat/heketi-client" } } }, { "category": "product_version", "name": "heketi", "product": { "name": "heketi", "product_id": "heketi", "product_identification_helper": { "purl": "pkg:rpm/redhat/heketi" } } }, { "category": "product_version", "name": "heketi.src", "product": { "name": "heketi.src", "product_id": "heketi.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/heketi?arch=src" } } }, { "category": "product_version", "name": "python-heketi", "product": { "name": "python-heketi", "product_id": "python-heketi", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-heketi" } } } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift" }, "product_reference": "atomic-openshift", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift-clients" }, "product_reference": "atomic-openshift-clients", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-redistributable as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift-clients-redistributable" }, "product_reference": "atomic-openshift-clients-redistributable", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-docker-excluder as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift-docker-excluder" }, "product_reference": "atomic-openshift-docker-excluder", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-excluder as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift-excluder" }, "product_reference": "atomic-openshift-excluder", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-hyperkube as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift-hyperkube" }, "product_reference": "atomic-openshift-hyperkube", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-hypershift as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift-hypershift" }, "product_reference": "atomic-openshift-hypershift", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-master as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift-master" }, "product_reference": "atomic-openshift-master", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-node as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift-node" }, "product_reference": "atomic-openshift-node", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-pod as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift-pod" }, "product_reference": "atomic-openshift-pod", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-sdn-ovs as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift-sdn-ovs" }, "product_reference": "atomic-openshift-sdn-ovs", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-template-service-broker as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift-template-service-broker" }, "product_reference": "atomic-openshift-template-service-broker", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-tests as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift-tests" }, "product_reference": "atomic-openshift-tests", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift.src as a component of Red Hat OpenShift Container Platform 3.10", "product_id": "red_hat_openshift_container_platform_3.10:atomic-openshift.src" }, "product_reference": "atomic-openshift.src", "relates_to_product_reference": "red_hat_openshift_container_platform_3.10" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift" }, "product_reference": "atomic-openshift", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift-clients" }, "product_reference": "atomic-openshift-clients", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-redistributable as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift-clients-redistributable" }, "product_reference": "atomic-openshift-clients-redistributable", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-docker-excluder as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift-docker-excluder" }, "product_reference": "atomic-openshift-docker-excluder", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-excluder as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift-excluder" }, "product_reference": "atomic-openshift-excluder", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-hyperkube as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift-hyperkube" }, "product_reference": "atomic-openshift-hyperkube", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-hypershift as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift-hypershift" }, "product_reference": "atomic-openshift-hypershift", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-master as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift-master" }, "product_reference": "atomic-openshift-master", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-node as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift-node" }, "product_reference": "atomic-openshift-node", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-pod as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift-pod" }, "product_reference": "atomic-openshift-pod", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-sdn-ovs as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift-sdn-ovs" }, "product_reference": "atomic-openshift-sdn-ovs", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-template-service-broker as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift-template-service-broker" }, "product_reference": "atomic-openshift-template-service-broker", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-tests as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift-tests" }, "product_reference": "atomic-openshift-tests", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "red_hat_openshift_container_platform_3.11:atomic-openshift.src" }, "product_reference": "atomic-openshift.src", "relates_to_product_reference": "red_hat_openshift_container_platform_3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift" }, "product_reference": "atomic-openshift", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift-clients" }, "product_reference": "atomic-openshift-clients", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-redistributable as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift-clients-redistributable" }, "product_reference": "atomic-openshift-clients-redistributable", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-cluster-capacity as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift-cluster-capacity" }, "product_reference": "atomic-openshift-cluster-capacity", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-docker-excluder as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift-docker-excluder" }, "product_reference": "atomic-openshift-docker-excluder", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-excluder as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift-excluder" }, "product_reference": "atomic-openshift-excluder", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-federation-services as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift-federation-services" }, "product_reference": "atomic-openshift-federation-services", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-master as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift-master" }, "product_reference": "atomic-openshift-master", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-node as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift-node" }, "product_reference": "atomic-openshift-node", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-pod as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift-pod" }, "product_reference": "atomic-openshift-pod", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-sdn-ovs as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift-sdn-ovs" }, "product_reference": "atomic-openshift-sdn-ovs", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-service-catalog as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift-service-catalog" }, "product_reference": "atomic-openshift-service-catalog", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-template-service-broker as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift-template-service-broker" }, "product_reference": "atomic-openshift-template-service-broker", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-tests as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift-tests" }, "product_reference": "atomic-openshift-tests", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift.src as a component of Red Hat OpenShift Container Platform 3.9", "product_id": "red_hat_openshift_container_platform_3.9:atomic-openshift.src" }, "product_reference": "atomic-openshift.src", "relates_to_product_reference": "red_hat_openshift_container_platform_3.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-clients as a component of Red Hat OpenShift Container Platform 4", "product_id": "red_hat_openshift_container_platform_4:openshift-clients" }, "product_reference": "openshift-clients", "relates_to_product_reference": "red_hat_openshift_container_platform_4" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-clients-redistributable as a component of Red Hat OpenShift Container Platform 4", "product_id": "red_hat_openshift_container_platform_4:openshift-clients-redistributable" }, "product_reference": "openshift-clients-redistributable", "relates_to_product_reference": "red_hat_openshift_container_platform_4" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube as a component of Red Hat OpenShift Container Platform 4", "product_id": "red_hat_openshift_container_platform_4:openshift-hyperkube" }, "product_reference": "openshift-hyperkube", "relates_to_product_reference": "red_hat_openshift_container_platform_4" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kube-apiserver as a component of Red Hat OpenShift Container Platform 4", "product_id": "red_hat_openshift_container_platform_4:openshift-kube-apiserver" }, "product_reference": "openshift-kube-apiserver", "relates_to_product_reference": "red_hat_openshift_container_platform_4" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kube-controller-manager as a component of Red Hat OpenShift Container Platform 4", "product_id": "red_hat_openshift_container_platform_4:openshift-kube-controller-manager" }, "product_reference": "openshift-kube-controller-manager", "relates_to_product_reference": "red_hat_openshift_container_platform_4" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kube-scheduler as a component of Red Hat OpenShift Container Platform 4", "product_id": "red_hat_openshift_container_platform_4:openshift-kube-scheduler" }, "product_reference": "openshift-kube-scheduler", "relates_to_product_reference": "red_hat_openshift_container_platform_4" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kubelet as a component of Red Hat OpenShift Container Platform 4", "product_id": "red_hat_openshift_container_platform_4:openshift-kubelet" }, "product_reference": "openshift-kubelet", "relates_to_product_reference": "red_hat_openshift_container_platform_4" }, { "category": "default_component_of", "full_product_name": { "name": "openshift.src as a component of Red Hat OpenShift Container Platform 4", "product_id": "red_hat_openshift_container_platform_4:openshift.src" }, "product_reference": "openshift.src", "relates_to_product_reference": "red_hat_openshift_container_platform_4" }, { "category": "default_component_of", "full_product_name": { "name": "heketi as a component of Red Hat Storage 3", "product_id": "red_hat_storage_3:heketi" }, "product_reference": "heketi", "relates_to_product_reference": "red_hat_storage_3" }, { "category": "default_component_of", "full_product_name": { "name": "heketi-client as a component of Red Hat Storage 3", "product_id": "red_hat_storage_3:heketi-client" }, "product_reference": "heketi-client", "relates_to_product_reference": "red_hat_storage_3" }, { "category": "default_component_of", "full_product_name": { "name": "heketi.src as a component of Red Hat Storage 3", "product_id": "red_hat_storage_3:heketi.src" }, "product_reference": "heketi.src", "relates_to_product_reference": "red_hat_storage_3" }, { "category": "default_component_of", "full_product_name": { "name": "python-heketi as a component of Red Hat Storage 3", "product_id": "red_hat_storage_3:python-heketi" }, "product_reference": "python-heketi", "relates_to_product_reference": "red_hat_storage_3" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-11248", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "discovery_date": "2019-08-07T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "red_hat_openshift_container_platform_3.10:atomic-openshift", "red_hat_openshift_container_platform_3.10:atomic-openshift-clients", "red_hat_openshift_container_platform_3.10:atomic-openshift-clients-redistributable", "red_hat_openshift_container_platform_3.10:atomic-openshift-docker-excluder", "red_hat_openshift_container_platform_3.10:atomic-openshift-excluder", "red_hat_openshift_container_platform_3.10:atomic-openshift-hyperkube", "red_hat_openshift_container_platform_3.10:atomic-openshift-hypershift", "red_hat_openshift_container_platform_3.10:atomic-openshift-master", "red_hat_openshift_container_platform_3.10:atomic-openshift-node", "red_hat_openshift_container_platform_3.10:atomic-openshift-pod", "red_hat_openshift_container_platform_3.10:atomic-openshift-sdn-ovs", "red_hat_openshift_container_platform_3.10:atomic-openshift-template-service-broker", "red_hat_openshift_container_platform_3.10:atomic-openshift-tests", "red_hat_openshift_container_platform_3.10:atomic-openshift.src", "red_hat_openshift_container_platform_3.11:atomic-openshift", "red_hat_openshift_container_platform_3.11:atomic-openshift-clients", "red_hat_openshift_container_platform_3.11:atomic-openshift-clients-redistributable", "red_hat_openshift_container_platform_3.11:atomic-openshift-docker-excluder", "red_hat_openshift_container_platform_3.11:atomic-openshift-excluder", "red_hat_openshift_container_platform_3.11:atomic-openshift-hyperkube", "red_hat_openshift_container_platform_3.11:atomic-openshift-hypershift", "red_hat_openshift_container_platform_3.11:atomic-openshift-master", "red_hat_openshift_container_platform_3.11:atomic-openshift-node", "red_hat_openshift_container_platform_3.11:atomic-openshift-pod", "red_hat_openshift_container_platform_3.11:atomic-openshift-sdn-ovs", "red_hat_openshift_container_platform_3.11:atomic-openshift-template-service-broker", "red_hat_openshift_container_platform_3.11:atomic-openshift-tests", "red_hat_openshift_container_platform_3.11:atomic-openshift.src", "red_hat_openshift_container_platform_3.9:atomic-openshift", "red_hat_openshift_container_platform_3.9:atomic-openshift-clients", "red_hat_openshift_container_platform_3.9:atomic-openshift-clients-redistributable", "red_hat_openshift_container_platform_3.9:atomic-openshift-cluster-capacity", "red_hat_openshift_container_platform_3.9:atomic-openshift-docker-excluder", "red_hat_openshift_container_platform_3.9:atomic-openshift-excluder", "red_hat_openshift_container_platform_3.9:atomic-openshift-federation-services", "red_hat_openshift_container_platform_3.9:atomic-openshift-master", "red_hat_openshift_container_platform_3.9:atomic-openshift-node", "red_hat_openshift_container_platform_3.9:atomic-openshift-pod", "red_hat_openshift_container_platform_3.9:atomic-openshift-sdn-ovs", "red_hat_openshift_container_platform_3.9:atomic-openshift-service-catalog", "red_hat_openshift_container_platform_3.9:atomic-openshift-template-service-broker", "red_hat_openshift_container_platform_3.9:atomic-openshift-tests", "red_hat_openshift_container_platform_3.9:atomic-openshift.src", "red_hat_storage_3:heketi", "red_hat_storage_3:heketi-client", "red_hat_storage_3:heketi.src", "red_hat_storage_3:python-heketi" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1738368" } ], "notes": [ { "category": "description", "text": "The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10 are affected. The issue is of medium severity, but not exposed by the default configuration.", "title": "Vulnerability description" }, { "category": "summary", "text": "kubernetes: /debug/pprof endpoint exposed on kubelet's healthz port", "title": "Vulnerability summary" }, { "category": "other", "text": "OpenShift Container Platform 3 is not vulnerable to this flaw as the kubelet healthz server is disabled by default. OpenShift Container Platform 4 enables the /debug/pprof endpoint on the kubelet healthz server to local traffic only.\nThere are multiple reasons why this has been rated as moderate by Red Hat.\n1. Firstly, even though the endpoint is vulnerable, not all Kubernetes deployments expose the healthz /debug/pprof interface to untrusted networks. Many use network policies or restrict that port to internal or localhost. SUSE’s advisory explicitly notes that the debugging endpoint “is not exposed by the default configuration.”\n2. While the biggest impact is confidentiality, theoretical leakage of internal state or memory, there is no integrity or full service takeover.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "red_hat_openshift_container_platform_4:openshift-clients", "red_hat_openshift_container_platform_4:openshift-clients-redistributable", "red_hat_openshift_container_platform_4:openshift-hyperkube", "red_hat_openshift_container_platform_4:openshift-kube-apiserver", "red_hat_openshift_container_platform_4:openshift-kube-controller-manager", "red_hat_openshift_container_platform_4:openshift-kube-scheduler", "red_hat_openshift_container_platform_4:openshift-kubelet", "red_hat_openshift_container_platform_4:openshift.src" ], "known_not_affected": [ "red_hat_openshift_container_platform_3.10:atomic-openshift", "red_hat_openshift_container_platform_3.10:atomic-openshift-clients", "red_hat_openshift_container_platform_3.10:atomic-openshift-clients-redistributable", "red_hat_openshift_container_platform_3.10:atomic-openshift-docker-excluder", "red_hat_openshift_container_platform_3.10:atomic-openshift-excluder", "red_hat_openshift_container_platform_3.10:atomic-openshift-hyperkube", "red_hat_openshift_container_platform_3.10:atomic-openshift-hypershift", "red_hat_openshift_container_platform_3.10:atomic-openshift-master", "red_hat_openshift_container_platform_3.10:atomic-openshift-node", "red_hat_openshift_container_platform_3.10:atomic-openshift-pod", "red_hat_openshift_container_platform_3.10:atomic-openshift-sdn-ovs", "red_hat_openshift_container_platform_3.10:atomic-openshift-template-service-broker", "red_hat_openshift_container_platform_3.10:atomic-openshift-tests", "red_hat_openshift_container_platform_3.10:atomic-openshift.src", "red_hat_openshift_container_platform_3.11:atomic-openshift", "red_hat_openshift_container_platform_3.11:atomic-openshift-clients", "red_hat_openshift_container_platform_3.11:atomic-openshift-clients-redistributable", "red_hat_openshift_container_platform_3.11:atomic-openshift-docker-excluder", "red_hat_openshift_container_platform_3.11:atomic-openshift-excluder", "red_hat_openshift_container_platform_3.11:atomic-openshift-hyperkube", "red_hat_openshift_container_platform_3.11:atomic-openshift-hypershift", "red_hat_openshift_container_platform_3.11:atomic-openshift-master", "red_hat_openshift_container_platform_3.11:atomic-openshift-node", "red_hat_openshift_container_platform_3.11:atomic-openshift-pod", "red_hat_openshift_container_platform_3.11:atomic-openshift-sdn-ovs", "red_hat_openshift_container_platform_3.11:atomic-openshift-template-service-broker", "red_hat_openshift_container_platform_3.11:atomic-openshift-tests", "red_hat_openshift_container_platform_3.11:atomic-openshift.src", "red_hat_openshift_container_platform_3.9:atomic-openshift", "red_hat_openshift_container_platform_3.9:atomic-openshift-clients", "red_hat_openshift_container_platform_3.9:atomic-openshift-clients-redistributable", "red_hat_openshift_container_platform_3.9:atomic-openshift-cluster-capacity", "red_hat_openshift_container_platform_3.9:atomic-openshift-docker-excluder", "red_hat_openshift_container_platform_3.9:atomic-openshift-excluder", "red_hat_openshift_container_platform_3.9:atomic-openshift-federation-services", "red_hat_openshift_container_platform_3.9:atomic-openshift-master", "red_hat_openshift_container_platform_3.9:atomic-openshift-node", "red_hat_openshift_container_platform_3.9:atomic-openshift-pod", "red_hat_openshift_container_platform_3.9:atomic-openshift-sdn-ovs", "red_hat_openshift_container_platform_3.9:atomic-openshift-service-catalog", "red_hat_openshift_container_platform_3.9:atomic-openshift-template-service-broker", "red_hat_openshift_container_platform_3.9:atomic-openshift-tests", "red_hat_openshift_container_platform_3.9:atomic-openshift.src", "red_hat_storage_3:heketi", "red_hat_storage_3:heketi-client", "red_hat_storage_3:heketi.src", "red_hat_storage_3:python-heketi" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-11248" }, { "category": "external", "summary": "RHBZ#1738368", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1738368" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11248", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11248" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11248", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11248" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/pKELclHIov8", "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/pKELclHIov8" } ], "release_date": "2019-08-07T00:00:00+00:00", "remediations": [ { "category": "none_available", "details": "Fix deferred", "product_ids": [ "red_hat_openshift_container_platform_4:openshift-clients", "red_hat_openshift_container_platform_4:openshift-clients-redistributable", "red_hat_openshift_container_platform_4:openshift-hyperkube", "red_hat_openshift_container_platform_4:openshift-kube-apiserver", "red_hat_openshift_container_platform_4:openshift-kube-controller-manager", "red_hat_openshift_container_platform_4:openshift-kube-scheduler", "red_hat_openshift_container_platform_4:openshift-kubelet", "red_hat_openshift_container_platform_4:openshift.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.0" }, "products": [ "red_hat_openshift_container_platform_3.10:atomic-openshift", "red_hat_openshift_container_platform_3.10:atomic-openshift-clients", "red_hat_openshift_container_platform_3.10:atomic-openshift-clients-redistributable", "red_hat_openshift_container_platform_3.10:atomic-openshift-docker-excluder", "red_hat_openshift_container_platform_3.10:atomic-openshift-excluder", "red_hat_openshift_container_platform_3.10:atomic-openshift-hyperkube", "red_hat_openshift_container_platform_3.10:atomic-openshift-hypershift", "red_hat_openshift_container_platform_3.10:atomic-openshift-master", "red_hat_openshift_container_platform_3.10:atomic-openshift-node", "red_hat_openshift_container_platform_3.10:atomic-openshift-pod", "red_hat_openshift_container_platform_3.10:atomic-openshift-sdn-ovs", "red_hat_openshift_container_platform_3.10:atomic-openshift-template-service-broker", "red_hat_openshift_container_platform_3.10:atomic-openshift-tests", "red_hat_openshift_container_platform_3.10:atomic-openshift.src", "red_hat_openshift_container_platform_3.11:atomic-openshift", "red_hat_openshift_container_platform_3.11:atomic-openshift-clients", "red_hat_openshift_container_platform_3.11:atomic-openshift-clients-redistributable", "red_hat_openshift_container_platform_3.11:atomic-openshift-docker-excluder", "red_hat_openshift_container_platform_3.11:atomic-openshift-excluder", "red_hat_openshift_container_platform_3.11:atomic-openshift-hyperkube", "red_hat_openshift_container_platform_3.11:atomic-openshift-hypershift", "red_hat_openshift_container_platform_3.11:atomic-openshift-master", "red_hat_openshift_container_platform_3.11:atomic-openshift-node", "red_hat_openshift_container_platform_3.11:atomic-openshift-pod", "red_hat_openshift_container_platform_3.11:atomic-openshift-sdn-ovs", "red_hat_openshift_container_platform_3.11:atomic-openshift-template-service-broker", "red_hat_openshift_container_platform_3.11:atomic-openshift-tests", "red_hat_openshift_container_platform_3.11:atomic-openshift.src", "red_hat_openshift_container_platform_3.9:atomic-openshift", "red_hat_openshift_container_platform_3.9:atomic-openshift-clients", "red_hat_openshift_container_platform_3.9:atomic-openshift-clients-redistributable", "red_hat_openshift_container_platform_3.9:atomic-openshift-cluster-capacity", "red_hat_openshift_container_platform_3.9:atomic-openshift-docker-excluder", "red_hat_openshift_container_platform_3.9:atomic-openshift-excluder", "red_hat_openshift_container_platform_3.9:atomic-openshift-federation-services", "red_hat_openshift_container_platform_3.9:atomic-openshift-master", "red_hat_openshift_container_platform_3.9:atomic-openshift-node", "red_hat_openshift_container_platform_3.9:atomic-openshift-pod", "red_hat_openshift_container_platform_3.9:atomic-openshift-sdn-ovs", "red_hat_openshift_container_platform_3.9:atomic-openshift-service-catalog", "red_hat_openshift_container_platform_3.9:atomic-openshift-template-service-broker", "red_hat_openshift_container_platform_3.9:atomic-openshift-tests", "red_hat_openshift_container_platform_3.9:atomic-openshift.src", "red_hat_openshift_container_platform_4:openshift-clients", "red_hat_openshift_container_platform_4:openshift-clients-redistributable", "red_hat_openshift_container_platform_4:openshift-hyperkube", "red_hat_openshift_container_platform_4:openshift-kube-apiserver", "red_hat_openshift_container_platform_4:openshift-kube-controller-manager", "red_hat_openshift_container_platform_4:openshift-kube-scheduler", "red_hat_openshift_container_platform_4:openshift-kubelet", "red_hat_openshift_container_platform_4:openshift.src", "red_hat_storage_3:heketi", "red_hat_storage_3:heketi-client", "red_hat_storage_3:heketi.src", "red_hat_storage_3:python-heketi" ] } ], "threats": [ { "category": "impact", "details": "Moderate", "product_ids": [ "red_hat_openshift_container_platform_3.10:atomic-openshift", "red_hat_openshift_container_platform_3.10:atomic-openshift-clients", "red_hat_openshift_container_platform_3.10:atomic-openshift-clients-redistributable", "red_hat_openshift_container_platform_3.10:atomic-openshift-docker-excluder", "red_hat_openshift_container_platform_3.10:atomic-openshift-excluder", "red_hat_openshift_container_platform_3.10:atomic-openshift-hyperkube", "red_hat_openshift_container_platform_3.10:atomic-openshift-hypershift", "red_hat_openshift_container_platform_3.10:atomic-openshift-master", "red_hat_openshift_container_platform_3.10:atomic-openshift-node", "red_hat_openshift_container_platform_3.10:atomic-openshift-pod", "red_hat_openshift_container_platform_3.10:atomic-openshift-sdn-ovs", "red_hat_openshift_container_platform_3.10:atomic-openshift-template-service-broker", "red_hat_openshift_container_platform_3.10:atomic-openshift-tests", "red_hat_openshift_container_platform_3.10:atomic-openshift.src", "red_hat_openshift_container_platform_3.11:atomic-openshift", "red_hat_openshift_container_platform_3.11:atomic-openshift-clients", "red_hat_openshift_container_platform_3.11:atomic-openshift-clients-redistributable", "red_hat_openshift_container_platform_3.11:atomic-openshift-docker-excluder", "red_hat_openshift_container_platform_3.11:atomic-openshift-excluder", "red_hat_openshift_container_platform_3.11:atomic-openshift-hyperkube", "red_hat_openshift_container_platform_3.11:atomic-openshift-hypershift", "red_hat_openshift_container_platform_3.11:atomic-openshift-master", "red_hat_openshift_container_platform_3.11:atomic-openshift-node", "red_hat_openshift_container_platform_3.11:atomic-openshift-pod", "red_hat_openshift_container_platform_3.11:atomic-openshift-sdn-ovs", "red_hat_openshift_container_platform_3.11:atomic-openshift-template-service-broker", "red_hat_openshift_container_platform_3.11:atomic-openshift-tests", "red_hat_openshift_container_platform_3.11:atomic-openshift.src", "red_hat_openshift_container_platform_3.9:atomic-openshift", "red_hat_openshift_container_platform_3.9:atomic-openshift-clients", "red_hat_openshift_container_platform_3.9:atomic-openshift-clients-redistributable", "red_hat_openshift_container_platform_3.9:atomic-openshift-cluster-capacity", "red_hat_openshift_container_platform_3.9:atomic-openshift-docker-excluder", "red_hat_openshift_container_platform_3.9:atomic-openshift-excluder", "red_hat_openshift_container_platform_3.9:atomic-openshift-federation-services", "red_hat_openshift_container_platform_3.9:atomic-openshift-master", "red_hat_openshift_container_platform_3.9:atomic-openshift-node", "red_hat_openshift_container_platform_3.9:atomic-openshift-pod", "red_hat_openshift_container_platform_3.9:atomic-openshift-sdn-ovs", "red_hat_openshift_container_platform_3.9:atomic-openshift-service-catalog", "red_hat_openshift_container_platform_3.9:atomic-openshift-template-service-broker", "red_hat_openshift_container_platform_3.9:atomic-openshift-tests", "red_hat_openshift_container_platform_3.9:atomic-openshift.src", "red_hat_storage_3:heketi", "red_hat_storage_3:heketi-client", "red_hat_storage_3:heketi.src", "red_hat_storage_3:python-heketi" ] }, { "category": "impact", "details": "Low", "product_ids": [ "red_hat_openshift_container_platform_4:openshift-clients", "red_hat_openshift_container_platform_4:openshift-clients-redistributable", "red_hat_openshift_container_platform_4:openshift-hyperkube", "red_hat_openshift_container_platform_4:openshift-kube-apiserver", "red_hat_openshift_container_platform_4:openshift-kube-controller-manager", "red_hat_openshift_container_platform_4:openshift-kube-scheduler", "red_hat_openshift_container_platform_4:openshift-kubelet", "red_hat_openshift_container_platform_4:openshift.src" ] } ], "title": "kubernetes: /debug/pprof endpoint exposed on kubelet's healthz port" } ] }