Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-AE2D23095470B73558795A81776A9FCDHistoryFeb 06, 2023 - 12:00 a.m.
Insertion of Sensitive Information into Log File
2023-02-0600:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
12
kubernetes
logging level
authorization
bearer tokens
api server
client tool
v1.19.3
v1.18.10
v1.17.13
v1.20.0-alpha2
0.0004 Low
EPSS
Percentile
12.7%
In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects <= v1.19.3, <= v1.18.10, <= v1.17.13, < v1.20.0-alpha2.
| CPE | Name | Operator | Version |
|---|---|---|---|
| go/k8s.io/client-go | lt | 0.20.0-alpha.2 |
References
github.com/advisories/GHSA-8cfg-vx93-jvxw
github.com/kubernetes/kubernetes/commit/e99df0e5a75eb6e86123b56d53e9b7ca0fd00419
github.com/kubernetes/kubernetes/issues/95623
github.com/kubernetes/kubernetes/pull/95316
groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ
nvd.nist.gov/vuln/detail/CVE-2020-8565
pkg.go.dev/vuln/GO-2021-0064
Related
gitlab
gitlab
Insertion of Sensitive Information into Log File
2023-02-06 00:00:00
Inclusion of Sensitive Information in Log Files
2020-12-07 00:00:00
debiancve
debiancve
CVE-2020-8565
2020-12-07 22:15:21
wolfi
wolfi
CVE-2020-8565 vulnerabilities
2024-06-29 09:08:33
github
github
Kubernetes client-go vulnerable to Sensitive Information Leak via Log File
2023-02-06 23:27:56
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to sensitive information exposure in Kubernetes [CVE-2020-8565]
2024-06-20 18:20:36
ubuntucve
ubuntucve
CVE-2020-8565
2020-12-07 00:00:00
osv
osv
CVE-2020-8565
2020-12-07 22:15:21
Kubernetes client-go vulnerable to Sensitive Information Leak via Log File
2023-02-06 23:27:56
nessus
nessus
veracode
veracode
Information Disclosure
2023-02-10 12:44:49
prion
prion
Authorization
2020-12-07 22:15:00
cbl_mariner
cbl_mariner
CVE-2020-8565 affecting package kubernetes 1.17.13-6
2021-01-29 07:40:01
nvd
nvd
CVE-2020-8565
2020-12-07 22:15:21
cvelist
cvelist
redhatcve
redhatcve
CVE-2020-8565
2020-10-16 00:02:11
cve
cve
CVE-2020-8565
2020-12-07 22:15:21
photon
photon
Moderate Photon OS Security Update - PHSA-2021-0247
2021-03-18 00:00:00
Moderate Photon OS Security Update - PHSA-2021-3.0-0247
2021-06-03 00:00:00
hackerone
hackerone
Kubernetes: CVE-2019-11250 remains in effect.
2020-08-06 17:42:21
redhat
redhat
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:3760-1)
2021-06-09 00:00:00