Lucene search
Veracode Vulnerability DatabaseVERACODE:39201HistoryFeb 10, 2023 - 12:44 p.m.
Information Disclosure
2023-02-1012:44:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
kubernetes
vulnerability
information disclosure
round_trippers.go
authenticated connection
api server logs
client tool output
kubectl
software
0.0004 Low
EPSS
Percentile
12.7%
kubernetes is vulnerable to Information Disclosure. The vulnerability exists in the equals function of round_trippers.go which allows unauthenticated attackers to use another user’s authenticated connection to read data in the API server logs and a client tool output such as kubectl.
References
github.com/advisories/GHSA-8cfg-vx93-jvxw
github.com/kubernetes/kubernetes/commit/e99df0e5a75eb6e86123b56d53e9b7ca0fd00419
github.com/kubernetes/kubernetes/issues/95623
github.com/kubernetes/kubernetes/pull/95316
groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ
pkg.go.dev/vuln/GO-2021-0064
Related
gitlab
gitlab
Insertion of Sensitive Information into Log File
2023-02-06 00:00:00
Inclusion of Sensitive Information in Log Files
2020-12-07 00:00:00
Insertion of Sensitive Information into Log File
2023-02-06 00:00:00
debiancve
debiancve
CVE-2020-8565
2020-12-07 22:15:21
wolfi
wolfi
CVE-2020-8565 vulnerabilities
2024-06-29 09:08:33
github
github
Kubernetes client-go vulnerable to Sensitive Information Leak via Log File
2023-02-06 23:27:56
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to sensitive information exposure in Kubernetes [CVE-2020-8565]
2024-06-20 18:20:36
ubuntucve
ubuntucve
CVE-2020-8565
2020-12-07 00:00:00
osv
osv
CVE-2020-8565
2020-12-07 22:15:21
Kubernetes client-go vulnerable to Sensitive Information Leak via Log File
2023-02-06 23:27:56
nessus
nessus
prion
prion
Authorization
2020-12-07 22:15:00
cbl_mariner
cbl_mariner
CVE-2020-8565 affecting package kubernetes 1.17.13-6
2021-01-29 07:40:01
nvd
nvd
CVE-2020-8565
2020-12-07 22:15:21
cvelist
cvelist
redhatcve
redhatcve
CVE-2020-8565
2020-10-16 00:02:11
cve
cve
CVE-2020-8565
2020-12-07 22:15:21
photon
photon
Moderate Photon OS Security Update - PHSA-2021-0247
2021-03-18 00:00:00
Moderate Photon OS Security Update - PHSA-2021-3.0-0247
2021-06-03 00:00:00
hackerone
hackerone
Kubernetes: CVE-2019-11250 remains in effect.
2020-08-06 17:42:21
redhat
redhat
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:3760-1)
2021-06-09 00:00:00