Linux Distros Unpatched Vulnerability : CVE-2020-8563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...

org.jenkins-ci.main:jenkins-test-harness (1.504), org.jenkins-ci.main:jenkins-war (1.504) +6 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.504)

org.jenkins-ci.main:jenkins-core MAVEN version 1.504 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.504 - org.jenkins-ci.main:jenkins-war 1.504 -...

org.jenkins-ci.plugins:vsphere-cloud (>=2.15, <=2.21) potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.2.2)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:vsphere-cloud =2.15, =2.21 Source cves: CVE-2023-40338...

org.jenkins-ci.plugins:vsphere-cloud (>=2.15, <=2.21) potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.2.2)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:vsphere-cloud =2.15, =2.21 Source cves: CVE-2023-40337...

org.jenkins-ci.plugins:vsphere-cloud (>=2.15, <=2.21) potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.2.2)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:vsphere-cloud =2.15, =2.21 Source cves: CVE-2023-40336...

kubernetes: Secret leaks in kube-controller-manager when using vSphere Provider

A flaw was found in kubernetes. Clusters running on VSphere, using VSphere as a cloud provider a with logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log...

Kubernetes: secret leaks in vsphere cloud controller manager log

Report Submission Form Summary: When create k8s cluster over vsphere and enable vsphere as cloud provider. With logging level set to 4 or above, secret information will be printed out in the cloud controller manager's log. Kubernetes Version: 1.18.6 Component Version: legacy cloud provider Steps ...