Lucene search
GoogleOSV:GHSA-5XFG-WV98-264MHistoryApr 24, 2024 - 8:02 p.m.
Sensitive Information leak via Log File in Kubernetes
2024-04-2420:02:20
Google
osv.dev
3
kubernetes
vsphere
credentials
leak
log file
security vulnerability
0.0005 Low
EPSS
Percentile
16.4%
In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager’s log. This affects < v1.19.3.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/kubernetes/kubernetes | lt | 1.19.3 |
References
bugzilla.redhat.com/show_bug.cgi?id=1886635
github.com/kubernetes/kubernetes
github.com/kubernetes/kubernetes/issues/95621
github.com/kubernetes/kubernetes/pull/95236
github.com/kubernetes/kubernetes/pull/95236/commits/247f6dd09299bc7893c1e0affea11c0255025b96
groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk
groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ
nvd.nist.gov/vuln/detail/CVE-2020-8563
security.netapp.com/advisory/ntap-20210122-0006
Related
nessus
nessus
RHEL 7 / 8 : OpenShift Container Platform 4.6.8 (RHSA-2020:5260)
2020-12-14 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-8563 affecting package kubernetes 1.18.17-6
2021-06-09 03:51:10
CVE-2020-8563 affecting package kubernetes-1.18.14 1.18.14-8
2024-05-16 09:07:11
CVE-2020-8563 affecting package kubernetes-1.18.17 1.18.17-9
2024-05-16 09:07:11
github
github
Sensitive Information leak via Log File in Kubernetes
2024-04-24 20:02:20
cvelist
cvelist
Secret leaks in logs for vSphere Provider kube-controller-manager
2020-10-15 00:00:00
hackerone
hackerone
Kubernetes: secret leaks in vsphere cloud controller manager log
2020-08-25 00:29:42
gitlab
gitlab
Inclusion of Sensitive Information in Log Files
2020-12-07 00:00:00
prion
prion
Code injection
2020-12-07 22:15:00
cve
cve
CVE-2020-8563
2020-12-07 22:15:00
debiancve
debiancve
CVE-2020-8563
2020-12-07 22:15:00
osv
osv
CVE-2020-8563
2020-12-07 22:15:21
ubuntucve
ubuntucve
CVE-2020-8563
2020-12-07 00:00:00
redhat
redhat
veracode
veracode
Information Disclosure
2020-10-19 08:53:40
redhatcve
redhatcve
CVE-2020-8563
2020-10-16 00:02:03
