What’s Vulnerable › Vulnerabilities

CVE-2019-3682: Insecure API port exposed to all Master Node guest containers

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-01-17 · updated 2026-06-17
• Weakness: CWE-668

Description

The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node.

Affected products

• SUSE CaaS Platform 4.5: 3.0

References

• https://bugzilla.suse.com/show_bug.cgi?id=1121148
• https://bugzilla.suse.com/show_bug.cgi?id=1121148

Get alerted when CVE-2019-3682 or the next vulnerability affects your stack