EUVD-2022-4401

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Kubernetes client-go library logs can expose credentials to unauthorized users

Reporter	Title	Published	Views	Family All 76
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GoLang Go and Kubernetes affect IBM watsonx.data	18 Sep 202416:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	20 Aug 202218:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	25 Jun 202410:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataStage on Cloud Pak for Data is vulnerable to sensitive information leaks due to a flaw in the Kubernetes kube-apiserver (CVE-2019-11250, CVE-2020-8565)	13 Mar 202523:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Kubernetes affects IBM Watson Studio Local	20 Dec 201913:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	1 Sep 202514:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Kubernetes affect IBM InfoSphere Information Server	1 Apr 202121:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Kubernetes affects watsonx.data	3 Sep 202420:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "af8ae3fd-d716-377c-b066-009f84ec5eea",
        "vendor": {
          "name": "Kubernetes"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "f4a35aee-09ed-3e41-8257-8a2e89aba01a",
        "product": {
          "name": "Kubernetes"
        },
        "product_version": "prior to 1.16"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-11250
github	www.github.com/kubernetes/kubernetes/issues/81114
github	www.github.com/kubernetes/kubernetes/pull/81330
github	www.github.com/kubernetes/kubernetes/commit/4441f1d9c3e94d9a3d93b4f184a591cab02a5245
access	www.access.redhat.com/errata/RHSA-2019:4052
access	www.access.redhat.com/errata/RHSA-2019:4087https://nvd.nist.gov/vuln/detail/CVE-2019-11250
github	www.github.com/kubernetes/kubernetes
pkg	www.pkg.go.dev/vuln/GO-2021-0065
security	www.security.netapp.com/advisory/ntap-20190919-0003
openwall	www.openwall.com/lists/oss-security/2020/10/16/2

03 Oct 2025 20:07Current

5.2Medium risk

Vulners AI Score5.2

CVSS 34.7

CVSS 23.5

CVSS 3.16.5

EPSS0.0081