CVE-2020-8565

ADVISORY - github

Summary

In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects <= v1.19.5, <= v1.18.13, <= v1.17.15, < v1.20.0-alpha2.

EPSS Score⁠: 0.0006 (0.192)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-532⁠

Insertion of Sensitive Information into Log File

ADVISORY - github

CWE-532⁠

Insertion of Sensitive Information into Log File

ADVISORY - gitlab

CWE-1035⁠

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

CWE-532⁠

Insertion of Sensitive Information into Log File

CWE-937⁠

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

CWE-117⁠

Improper Output Neutralization for Logs

Impacted images

Advisories

NIST

CREATED

5 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2020-8565⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-532⁠

CVSS SCORE

4.7medium

GitHub

CREATED

3 years ago

UPDATED

2 years ago

ADVISORY IDGHSA-8cfg-vx93-jvxw⁠

EXPLOITABILITY SCORE

1.0

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-532⁠

CVSS SCORE

4.7medium

Debian

CREATED

5 years ago

UPDATED

18 days ago

ADVISORY IDCVE-2020-8565⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

5 years ago

UPDATED

6 months ago

ADVISORY IDCVE-2020-8565⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.5medium

GoLang

CREATED

5 years ago

UPDATED

1 year ago

ADVISORY IDGO-2021-0064⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

GitLab

CREATED

5 years ago

UPDATED

3 years ago

ADVISORY ID

CVE-2020-8565

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1035⁠CWE-532⁠CWE-937⁠

CVSS SCORE

5.5medium

Red Hat

CREATED

5 years ago

UPDATED

11 months ago

ADVISORY IDCVE-2020-8565⁠

EXPLOITABILITY SCORE

1.6

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-117⁠

CVSS SCORE

5.3medium

Chainguard

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY ID

CGA-6h42-qg2h-m7r9

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY ID

CGA-fmmh-rp4v-x7w7

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

7 months ago

UPDATED

7 months ago

ADVISORY ID

CGA-p832-pfvm-ghh3

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

10 months ago

UPDATED

10 months ago

ADVISORY ID

CGA-qqmw-pgch-66cr

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

11 days ago

UPDATED

11 days ago

ADVISORY ID

CGA-r5j8-36p9-q5pc

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY