Bearer tokens are revealed in logs (audit finding TOB-K8S-001)

🗓️ 08 Aug 2019 02:03:04Reported by Kubernetes Security Response CommitteeType

Bearer tokens logged in Kubernetes apiserver logs can impersonate users; remove tokens from logs and enforce log safeguards.

Reporter	Title	Published	Views	Family All 77
ibm	Security Bulletin: Vulnerabilities in GoLang Go and Kubernetes affect IBM watsonx.data	18 Sep 202416:17	–	ibm
ibm	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	20 Aug 202218:32	–	ibm
ibm	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
ibm	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	25 Jun 202410:55	–	ibm
ibm	Security Bulletin: IBM DataStage on Cloud Pak for Data is vulnerable to sensitive information leaks due to a flaw in the Kubernetes kube-apiserver (CVE-2019-11250, CVE-2020-8565)	13 Mar 202523:08	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in Kubernetes affects IBM Watson Studio Local	20 Dec 201913:53	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	1 Sep 202514:40	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in Kubernetes affect IBM InfoSphere Information Server	1 Apr 202121:05	–	ibm
ibm	Security Bulletin: Vulnerability in Kubernetes affects watsonx.data	3 Sep 202420:08	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm

08 Aug 2019 02:03Current

6.2Medium risk

Vulners AI Score6.2

CVSS 23.5

CVSS 3.16.5

CVSS 34.7

EPSS0.01766