CVE-2019-11248

CVE-2019-11248 exposes the /debug/pprof debugging endpoint on the unauthenticated Kubelet healthz port, potentially leaking sensitive information or enabling limited denial of service. This vulnerability affects Kubernetes versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10. It carries a CVSS score of 8.2 HIGH, indicating a critical risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, though it is not exposed by default. While there is no evidence of active exploitation, Metasploit modules, or ExploitDB entries, Nuclei templates exist for detection, and there is minimal community discussion or media coverage.