VULNERABILITY INTELLIGENCE

CVE-2020-8565

CVSS score4.7 MEDIUM
EPSS probability0.52%
CISA KEVNot currently listed
Published2020-12-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects <= v1.19.3, <= v1.18.10, <= v1.17.13, < v1.20.0-alpha2.

Weakness classification

  • CWE-532: Insertion of Sensitive Information into Log File

Primary references