CVE-2025-41240
Mounted Kubernetes Secrets under a predictable path located within the web server document root
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Mounted Kubernetes Secrets under a predictable path located within the web server document root
Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path (/opt/bitnami/*/secrets) that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets by accessing specific URLs if the application is exposed externally. The issue affects deployments using the default value of usePasswordFiles=true, which mounts secrets as files into the container filesystem.
Reserved 2025-04-16 | Published 2025-07-24 | Updated 2025-07-25 | Assigner vmwaregithub.com/...charts/security/advisories/GHSA-wgg9-9qgw-529w
Support options
