CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2020-8565
In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects <= v1.19.3, <= v1.18.10, <= v1.17.13, < v1.20.0-alpha2.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
- CWE
- CWE-532
- Published
- Modified
- Record from
- the NVD, synced
Affected
- kubernetes:kubernetes
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-8cfg-vx93-jvxw | Go | k8s.io/client-go | >=0.19.0 <0.19.6 | 0.19.6 |
| GHSA-8cfg-vx93-jvxw | Go | k8s.io/client-go | >=0.20.0-alpha.0 <0.20.0-alpha.2 | 0.20.0-alpha.2 |
| GHSA-8cfg-vx93-jvxw | Go | k8s.io/client-go | >=0.18.0 <0.18.14 | 0.18.14 |
| GHSA-8cfg-vx93-jvxw | Go | k8s.io/client-go | <0.17.16 | 0.17.16 |
| GHSA-8cfg-vx93-jvxw | Go | k8s.io/kubernetes | <1.20.0-alpha.2 | 1.20.0-alpha.2 |
| GO-2021-0064 | Go | k8s.io/client-go | <0.20.0-alpha.2 | 0.20.0-alpha.2 |