CVE-2020-8565 in Kubernetes

Résumé

par MITRE • 08/12/2020

In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: Kubernetes
• Réserver: 03/02/2020
• Divulgation: 08/12/2020
• Modérer: accepté
• Entrée: VDB-165675
• CPE: prêt
• CWE: CWE-532 (confirmé)
• CVSS: 5.5 (NVD)
• EPSS: 0.00060
• KEV: non
• Activités: très faible
• Secteur: Hospital, Telecommunication, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-8565
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-8565
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-8565/