CVE-2020-8564

MEDIUM4.7EPSS 0.04%

Kubernetes Sensitive Information leak via Log File

Published: 2/6/2023Modified: 2/4/2026

Also known as:GHSA-8mjg-8c8g-6h85CGA-hcrg-5wcm-j42rGO-2021-0066

Description

In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects < v1.19.3, < v1.18.10, < v1.17.13.

Affected packages (4)

Debian/kubernetesfrom 0, < 1.19.3-1
Go/github.com/kubernetes/kubernetes>= 1.19.0, < 1.19.3
Go/k8s.io/kubernetesfrom 0, < 1.20.0-alpha.1
Go/k8s.io/kubernetesfrom 0, < 1.20.0-alpha.1

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM4.7	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References (9)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-8564
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2020-8564
PATCHhttps://github.com/kubernetes/kubernetes
WEBhttps://github.com/kubernetes/kubernetes/commit/11793434dac97a49bfed0150b56ac63e5dc34634
WEBhttps://github.com/kubernetes/kubernetes/issues/95622
WEBhttps://github.com/kubernetes/kubernetes/pull/94712
WEBhttps://groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ
WEBhttps://pkg.go.dev/vuln/GO-2021-0066
WEBhttps://security.netapp.com/advisory/ntap-20210122-0006