CVE-2020-8563
MEDIUM6.3EPSS 0.07%Sensitive Information leak for VSphere users via Log File in k8s.io/kubernetes
Published: 4/24/2024Modified: 3/3/2026
Description
Sensitive Information leak for VSphere users via Log File in k8s.io/kubernetes
Affected packages (2)
- Go/github.com/kubernetes/kubernetesfrom 0, < 1.19.3
- Go/k8s.io/kubernetesfrom 0, < 1.19.3
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.3 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N |
References (10)
- ADVISORYhttps://github.com/advisories/GHSA-5xfg-wv98-264m
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-8563
- PATCHhttps://github.com/kubernetes/kubernetes
- WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=1886635
- WEBhttps://github.com/kubernetes/kubernetes/issues/95621
- WEBhttps://github.com/kubernetes/kubernetes/pull/95236
- WEBhttps://github.com/kubernetes/kubernetes/pull/95236/commits/247f6dd09299bc7893c1e0affea11c0255025b96
- WEBhttps://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk
- WEBhttps://groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ
- WEBhttps://security.netapp.com/advisory/ntap-20210122-0006