CVE-2020-8565

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-8565
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-8565.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-8565
Aliases
Downstream
Related
Published
2020-12-07T22:15:21.400Z
Modified
2026-07-18T14:09:29.158472Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects <= v1.19.3, <= v1.18.10, <= v1.17.13, < v1.20.0-alpha2.

References

Affected packages

Git / github.com/kubernetes/kubelet

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubelet
Events
Introduced
f9974c2baa2d9ca25416d38e7ecfc7ff4d05d58e
Last affected
e24c1e8df2dc66a36a852743b75e37a308aad8aa
Introduced
f0d06ae44a2e7ef0c05aecb6e7773222947dd156
Last affected
c9dc8031b48c5f8f9af1ccefd41694b61eb24269
Introduced
1af8853567a0faecc59fbc4d7d2ddc9359ddde83
Last affected
718969c3a78f519e13cbafce5da9b7ae5241e70e
Database specific 
{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.17.0"
        },
        {
            "last_affected": "1.17.13"
        },
        {
            "introduced": "1.18.0"
        },
        {
            "last_affected": "1.18.10"
        },
        {
            "introduced": "1.19.0"
        },
        {
            "last_affected": "1.19.3"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-8565.json"

Git / github.com/kubernetes/kubernetes

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubernetes
Events
Introduced
70132b0f130acc0bed193d9ba59dd186f0e634cf
Last affected
30d651da517185653e34e7ab99a792be6a3d9495
Introduced
9e991415386e4cf155a24b1da15becaa390438d8
Last affected
62876fc6d93e891aa7fbe19771e6a6c03773b0f7
Introduced
e19964183377d0ec2052d1f1fa930c4d7575bd50
Last affected
1e11e4a2108024935ecfcb2912226cedeafd99df
Database specific 
{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.17.0"
        },
        {
            "last_affected": "1.17.13"
        },
        {
            "introduced": "1.18.0"
        },
        {
            "last_affected": "1.18.10"
        },
        {
            "introduced": "1.19.0"
        },
        {
            "last_affected": "1.19.3"
        }
    ]
}

Affected versions

v1.*
v1.17.0
v1.17.1
v1.17.1-beta.0
v1.17.10-rc.0
v1.17.11
v1.17.11-rc.1
v1.17.12
v1.17.12-rc.0
v1.17.13
v1.17.13-rc.0
v1.17.2
v1.17.2-beta.0
v1.17.3
v1.17.3-beta.0
v1.17.4
v1.17.4-beta.0
v1.17.5
v1.17.5-beta.0
v1.17.6
v1.17.6-beta.0
v1.17.7
v1.17.7-rc.0
v1.17.8
v1.17.8-rc.0
v1.17.8-rc.1
v1.17.9
v1.17.9-rc.0
v1.18.0
v1.18.1
v1.18.1-beta.0
v1.18.10
v1.18.10-rc.0
v1.18.2
v1.18.2-beta.0
v1.18.3
v1.18.3-beta.0
v1.18.4
v1.18.4-rc.0
v1.18.5
v1.18.5-rc.0
v1.18.5-rc.1
v1.18.6
v1.18.6-rc.0
v1.18.7-rc.0
v1.18.8
v1.18.8-rc.1
v1.18.9
v1.18.9-rc.0
v1.19.0
v1.19.1
v1.19.1-rc.0
v1.19.2
v1.19.2-rc.0
v1.19.3
v1.19.3-rc.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-8565.json"