CLEANSTART-2026-TL98903 In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secr...

🗓️ 31 Oct 2026 12:06:30Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 3 Views

Information disclosure in nodetaint via malformed docker config files in Kubernetes.

Reporter	Title	Published	Views	Family All 72
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Kubernetes vulnerabilities (CVE-2020-8566, CVE-2020-8565, CVE-2020-8563, CVE-2020-8564)	26 Feb 202115:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	1 Sep 202514:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Python, Docker, and ICP affect IBM Spectrum Discover	13 May 202116:56	–	ibm
attackerkb	CVE-2020-8564	15 Oct 202004:00	–	attackerkb
Chainguard	CVE-2020-8564 vulnerabilities	7 Dec 202022:15	–	cgr
Circl	CVE-2020-8564	19 Oct 202007:56	–	circl
CNVD	Kubernetes Log Information Disclosure Vulnerability (CNVD-2020-65160)	6 Nov 202000:00	–	cnvd

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TL98903.json
osv	www.osv.dev/vulnerability/CVE-2020-8564
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8564

31 Oct 2026 16:04Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.15.5

EPSS0.00467

nodetaint Kubernetes information disclosure docker config file registry credentials