Lucene search
GitHub Advisory DatabaseGHSA-5XFG-WV98-264MHistoryApr 24, 2024 - 8:02 p.m.
Sensitive Information leak via Log File in Kubernetes
2024-04-2420:02:20
CWE-532
GitHub Advisory Database
github.com
1
kubernetes
vsphere
cloud credentials
logging level
cloud provider
security issue
In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager’s log. This affects < v1.19.3.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/kubernetes/kubernetes | lt | 1.19.3 |
References
bugzilla.redhat.com/show_bug.cgi?id=1886635
github.com/advisories/GHSA-5xfg-wv98-264m
github.com/kubernetes/kubernetes/issues/95621
github.com/kubernetes/kubernetes/pull/95236
github.com/kubernetes/kubernetes/pull/95236/commits/247f6dd09299bc7893c1e0affea11c0255025b96
groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk
groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ
nvd.nist.gov/vuln/detail/CVE-2020-8563
security.netapp.com/advisory/ntap-20210122-0006
Related
nessus
nessus
RHEL 7 / 8 : OpenShift Container Platform 4.6.8 (RHSA-2020:5260)
2020-12-14 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-8563 affecting package kubernetes-1.18.14 1.18.14-8
2024-05-16 16:07:09
CVE-2020-8563 affecting package kubernetes 1.18.17-6
2021-06-09 03:51:10
CVE-2020-8563 affecting package kubernetes-1.18.19 1.18.19-2
2024-05-16 16:07:09
osv
osv
Sensitive Information leak via Log File in Kubernetes
2024-04-24 20:02:20
CVE-2020-8563
2020-12-07 22:15:21
ubuntucve
ubuntucve
CVE-2020-8563
2020-12-07 00:00:00
redhat
redhat
hackerone
hackerone
Kubernetes: secret leaks in vsphere cloud controller manager log
2020-08-25 00:29:42
gitlab
gitlab
Inclusion of Sensitive Information in Log Files
2020-12-07 00:00:00
prion
prion
Code injection
2020-12-07 22:15:00
cve
cve
CVE-2020-8563
2020-12-07 22:15:00
debiancve
debiancve
CVE-2020-8563
2020-12-07 22:15:00
veracode
veracode
Information Disclosure
2020-10-19 08:53:40
redhatcve
redhatcve
CVE-2020-8563
2020-10-16 00:02:03
