CVE-2020-8565

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2020-8565

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8565.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-8565

Aliases

Related

Published

2020-12-07T22:15:21Z

Modified

2024-12-10T16:00:04Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects <= v1.19.3, <= v1.18.10, <= v1.17.13, < v1.20.0-alpha2.

References

Affected packages

Debian:11 / kubernetes

Package

Name: kubernetes
Purl: pkg:deb/debian/kubernetes?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.20.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / kubernetes

Package

Name: kubernetes
Purl: pkg:deb/debian/kubernetes?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.20.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/kubernetes/kubelet

Affected ranges

Type: GIT
Repo: https://github.com/kubernetes/kubelet
Events: Introduced

1af8853567a0faecc59fbc4d7d2ddc9359ddde83

Last affected

718969c3a78f519e13cbafce5da9b7ae5241e70e

Introduced

f0d06ae44a2e7ef0c05aecb6e7773222947dd156

Last affected

c9dc8031b48c5f8f9af1ccefd41694b61eb24269

Introduced

f9974c2baa2d9ca25416d38e7ecfc7ff4d05d58e

Last affected

e24c1e8df2dc66a36a852743b75e37a308aad8aa