CVE-2020-8564 Docker config secrets leaked when file is malformed and loglevel >= 4

🗓️ 07 Dec 2020 22:00:22Reported by kubernetesType

Docker config secrets leaked due to malformed file and high log leve

Reporter	Title	Published	Views	Family All 66
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Kubernetes vulnerabilities (CVE-2020-8566, CVE-2020-8565, CVE-2020-8563, CVE-2020-8564)	26 Feb 202115:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	1 Sep 202514:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Python, Docker, and ICP affect IBM Spectrum Discover	13 May 202116:56	–	ibm
Chainguard	CVE-2020-8564 vulnerabilities	7 Dec 202022:15	–	cgr
Circl	CVE-2020-8564	19 Oct 202007:56	–	circl
CNVD	Kubernetes Log Information Disclosure Vulnerability (CNVD-2020-65160)	6 Nov 202000:00	–	cnvd

[
  {
    "product": "Kubernetes",
    "vendor": "Kubernetes",
    "versions": [
      {
        "status": "affected",
        "version": "< 1.19.3"
      },
      {
        "status": "affected",
        "version": "< 1.18.10"
      },
      {
        "status": "affected",
        "version": "< 1.17.13"
      }
    ]
  }
]

Source	Link
groups	www.groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ
security	www.security.netapp.com/advisory/ntap-20210122-0006/
github	www.github.com/kubernetes/kubernetes/issues/95622

22 Jan 2021 12:06Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.14.7

EPSS0.00042

CWE-532