CVE-2019-25210 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-25210 Interim 1 13 2026-03-05T05:59:59Z current 2024-03-05T01:15:24Z 2026-03-05T05:59:59Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-25210 An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3. It displays values of secrets when the --dry-run flag is used. This is a security concern in some use cases, such as a --dry-run call by a CI/CD tool. NOTE: the vendor's position is that this behavior was introduced intentionally, and cannot be removed without breaking backwards compatibility (some users may be relying on these values). Also, it is not the Helm Project's responsibility if a user decides to use --dry-run within a CI/CD environment whose output is visible to unauthorized persons. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 openSUSE Leap 15.5 openSUSE Leap 15.6 helm helm-bash-completion helm-fish-completion helm-zsh-completion helm as a component of SUSE Enterprise Storage 7.1 helm-bash-completion as a component of SUSE Enterprise Storage 7.1 helm-zsh-completion as a component of SUSE Enterprise Storage 7.1 helm as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS helm-bash-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS helm as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS helm-bash-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS helm-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS helm as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS helm-bash-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS helm as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS helm-bash-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS helm as a component of SUSE Linux Enterprise Micro 5.5 helm-bash-completion as a component of SUSE Linux Enterprise Micro 5.5 helm as a component of SUSE Linux Enterprise Module for Containers 15 SP4 helm-bash-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP4 helm-zsh-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP4 helm as a component of SUSE Linux Enterprise Module for Containers 15 SP5 helm-bash-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP5 helm-zsh-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP5 helm as a component of SUSE Linux Enterprise Module for Containers 15 SP6 helm-bash-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP6 helm-zsh-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP6 helm as a component of SUSE Linux Enterprise Module for Containers 15 SP7 helm-bash-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP7 helm-zsh-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP7 helm-fish-completion as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 helm as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 helm-fish-completion as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 helm as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 helm as a component of SUSE Linux Enterprise Server 15 SP3-LTSS helm-bash-completion as a component of SUSE Linux Enterprise Server 15 SP3-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise Server 15 SP3-LTSS helm as a component of SUSE Linux Enterprise Server 15 SP4-LTSS helm-bash-completion as a component of SUSE Linux Enterprise Server 15 SP4-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise Server 15 SP4-LTSS helm as a component of SUSE Linux Enterprise Server 15 SP5-LTSS helm-bash-completion as a component of SUSE Linux Enterprise Server 15 SP5-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise Server 15 SP5-LTSS helm as a component of SUSE Linux Enterprise Server 15 SP6-LTSS helm-bash-completion as a component of SUSE Linux Enterprise Server 15 SP6-LTSS helm-zsh-completion as a component of SUSE Linux Enterprise Server 15 SP6-LTSS helm as a component of SUSE Linux Enterprise Server 16.0 helm-bash-completion as a component of SUSE Linux Enterprise Server 16.0 helm-fish-completion as a component of SUSE Linux Enterprise Server 16.0 helm-zsh-completion as a component of SUSE Linux Enterprise Server 16.0 helm as a component of SUSE Linux Enterprise Server Teradata 15 SP4 helm as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 helm-bash-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 helm-zsh-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 helm as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 helm-bash-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 helm-zsh-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 helm as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 helm-bash-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 helm-zsh-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 helm as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 helm-bash-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 helm-zsh-completion as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 helm as a component of SUSE Linux Enterprise Server for SAP applications 16.0 helm-bash-completion as a component of SUSE Linux Enterprise Server for SAP applications 16.0 helm-fish-completion as a component of SUSE Linux Enterprise Server for SAP applications 16.0 helm-zsh-completion as a component of SUSE Linux Enterprise Server for SAP applications 16.0 helm as a component of SUSE Linux Micro 6.0 helm-bash-completion as a component of SUSE Linux Micro 6.0 helm as a component of SUSE Linux Micro 6.1 helm-bash-completion as a component of SUSE Linux Micro 6.1 helm as a component of openSUSE Leap 15.5 helm-bash-completion as a component of openSUSE Leap 15.5 helm-fish-completion as a component of openSUSE Leap 15.5 helm-zsh-completion as a component of openSUSE Leap 15.5 helm as a component of openSUSE Leap 15.6 helm-bash-completion as a component of openSUSE Leap 15.6 helm-fish-completion as a component of openSUSE Leap 15.6 helm-zsh-completion as a component of openSUSE Leap 15.6 An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3. It displays values of secrets when the --dry-run flag is used. This is a security concern in some use cases, such as a --dry-run call by a CI/CD tool. NOTE: the vendor's position is that this behavior was introduced intentionally, and cannot be removed without breaking backwards compatibility (some users may be relying on these values). Also, it is not the Helm Project's responsibility if a user decides to use --dry-run within a CI/CD environment whose output is visible to unauthorized persons. CVE-2019-25210 SUSE Enterprise Storage 7.1:helm SUSE Enterprise Storage 7.1:helm-bash-completion SUSE Enterprise Storage 7.1:helm-zsh-completion SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:helm SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:helm-bash-completion SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:helm-zsh-completion SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:helm SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:helm-bash-completion SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:helm-zsh-completion SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:helm SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:helm-bash-completion SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:helm-zsh-completion SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:helm SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:helm-bash-completion SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:helm-zsh-completion SUSE Linux Enterprise Micro 5.5:helm SUSE Linux Enterprise Micro 5.5:helm-bash-completion SUSE Linux Enterprise Module for Containers 15 SP4:helm SUSE Linux Enterprise Module for Containers 15 SP4:helm-bash-completion SUSE Linux Enterprise Module for Containers 15 SP4:helm-zsh-completion SUSE Linux Enterprise Module for Containers 15 SP5:helm SUSE Linux Enterprise Module for Containers 15 SP5:helm-bash-completion SUSE Linux Enterprise Module for Containers 15 SP5:helm-zsh-completion SUSE Linux Enterprise Module for Containers 15 SP6:helm SUSE Linux Enterprise Module for Containers 15 SP6:helm-bash-completion SUSE Linux Enterprise Module for Containers 15 SP6:helm-zsh-completion SUSE Linux Enterprise Module for Containers 15 SP7:helm SUSE Linux Enterprise Module for Containers 15 SP7:helm-bash-completion SUSE Linux Enterprise Module for Containers 15 SP7:helm-zsh-completion SUSE Linux Enterprise Module for Package Hub 15 SP5:helm SUSE Linux Enterprise Module for Package Hub 15 SP5:helm-fish-completion SUSE Linux Enterprise Module for Package Hub 15 SP7:helm SUSE Linux Enterprise Module for Package Hub 15 SP7:helm-fish-completion SUSE Linux Enterprise Server 15 SP3-LTSS:helm SUSE Linux Enterprise Server 15 SP3-LTSS:helm-bash-completion SUSE Linux Enterprise Server 15 SP3-LTSS:helm-zsh-completion SUSE Linux Enterprise Server 15 SP4-LTSS:helm SUSE Linux Enterprise Server 15 SP4-LTSS:helm-bash-completion SUSE Linux Enterprise Server 15 SP4-LTSS:helm-zsh-completion SUSE Linux Enterprise Server 15 SP5-LTSS:helm SUSE Linux Enterprise Server 15 SP5-LTSS:helm-bash-completion SUSE Linux Enterprise Server 15 SP5-LTSS:helm-zsh-completion SUSE Linux Enterprise Server 15 SP6-LTSS:helm SUSE Linux Enterprise Server 15 SP6-LTSS:helm-bash-completion SUSE Linux Enterprise Server 15 SP6-LTSS:helm-zsh-completion SUSE Linux Enterprise Server 16.0:helm SUSE Linux Enterprise Server 16.0:helm-bash-completion SUSE Linux Enterprise Server 16.0:helm-fish-completion SUSE Linux Enterprise Server 16.0:helm-zsh-completion SUSE Linux Enterprise Server Teradata 15 SP4:helm SUSE Linux Enterprise Server for SAP Applications 15 SP3:helm SUSE Linux Enterprise Server for SAP Applications 15 SP3:helm-bash-completion SUSE Linux Enterprise Server for SAP Applications 15 SP3:helm-zsh-completion SUSE Linux Enterprise Server for SAP Applications 15 SP4:helm SUSE Linux Enterprise Server for SAP Applications 15 SP4:helm-bash-completion SUSE Linux Enterprise Server for SAP Applications 15 SP4:helm-zsh-completion SUSE Linux Enterprise Server for SAP Applications 15 SP5:helm SUSE Linux Enterprise Server for SAP Applications 15 SP5:helm-bash-completion SUSE Linux Enterprise Server for SAP Applications 15 SP5:helm-zsh-completion SUSE Linux Enterprise Server for SAP Applications 15 SP6:helm SUSE Linux Enterprise Server for SAP Applications 15 SP6:helm-bash-completion SUSE Linux Enterprise Server for SAP Applications 15 SP6:helm-zsh-completion SUSE Linux Enterprise Server for SAP applications 16.0:helm SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion SUSE Linux Micro 6.0:helm SUSE Linux Micro 6.0:helm-bash-completion SUSE Linux Micro 6.1:helm SUSE Linux Micro 6.1:helm-bash-completion openSUSE Leap 15.5:helm openSUSE Leap 15.5:helm-bash-completion openSUSE Leap 15.5:helm-fish-completion openSUSE Leap 15.5:helm-zsh-completion openSUSE Leap 15.6:helm openSUSE Leap 15.6:helm-bash-completion openSUSE Leap 15.6:helm-fish-completion openSUSE Leap 15.6:helm-zsh-completion low 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N