Lucene search

K
osvGoogleOSV:CVE-2020-8564
HistoryDec 07, 2020 - 10:15 p.m.

CVE-2020-8564

2020-12-0722:15:21
Google
osv.dev
7
kubernetes
logging
vulnerability
docker
config file
leakage
pull secrets
registry credentials
software

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

17.2%

In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects < v1.19.3, < v1.18.10, < v1.17.13.