{"id":"CVE-2020-8564","aliases":["DEBIAN-CVE-2020-8564","EUVD-2023-0668","GHSA-8mjg-8c8g-6h85","GO-2021-0066","RHSA-2020:4297","RHSA-2021:0172","RHSA-2021:3193","UBUNTU-CVE-2020-8564"],"status":"published","title":"Docker config secrets leaked when file is malformed and loglevel \u003e= 4","description":"In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects \u003c v1.19.3, \u003c v1.18.10, \u003c v1.17.13.","severity":{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-06","score":0.00467,"percentile":0.40595,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-532"],"published":"2020-12-07T22:00:22Z","modified":"2026-10-26T12:02:52Z","fixes":[{"ecosystem":"Go","package":"github.com/kubernetes/kubernetes","fixed_in":["1.19.3","1.18.10","1.17.13"],"sources":["ghsa","osv"]},{"ecosystem":"Go","package":"k8s.io/kubernetes","fixed_in":["1.20.0-alpha.1"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"kubernetes","fixed_in":["1.19.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"kubernetes","fixed_in":["1.19.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"kubernetes","fixed_in":["1.19.3-1"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift","fixed_in":["0:3.11.501-1.git.0.f8c4746.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients","fixed_in":["0:3.11.501-1.git.0.f8c4746.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients-redistributable","fixed_in":["0:3.11.501-1.git.0.f8c4746.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-docker-excluder","fixed_in":["0:3.11.501-1.git.0.f8c4746.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-excluder","fixed_in":["0:3.11.501-1.git.0.f8c4746.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hyperkube","fixed_in":["0:3.11.501-1.git.0.f8c4746.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hypershift","fixed_in":["0:3.11.501-1.git.0.f8c4746.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-master","fixed_in":["0:3.11.501-1.git.0.f8c4746.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node","fixed_in":["0:3.11.501-1.git.0.f8c4746.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-pod","fixed_in":["0:3.11.501-1.git.0.f8c4746.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-sdn-ovs","fixed_in":["0:3.11.501-1.git.0.f8c4746.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-template-service-broker","fixed_in":["0:3.11.501-1.git.0.f8c4746.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-tests","fixed_in":["0:3.11.501-1.git.0.f8c4746.el7"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/kubernetes/kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19.0"},{"fixed":"1.19.3"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/kubernetes/kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.18.10"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/kubernetes/kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13"}]}]},{"source":"ghsa","ecosystem":"Go","package":"k8s.io/kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.0-alpha.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/kubernetes/kubernetes","ranges":[{"type":"SEMVER","events":[{"introduced":"1.19.0"},{"fixed":"1.19.3"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/kubernetes/kubernetes","ranges":[{"type":"SEMVER","events":[{"introduced":"1.18.0"},{"fixed":"1.18.10"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/kubernetes/kubernetes","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.17.13"}]}]},{"source":"osv","ecosystem":"Go","package":"k8s.io/kubernetes","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.20.0-alpha.1"}]}]},{"source":"osv","ecosystem":"Go","package":"k8s.io/kubernetes","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.20.0-alpha.1"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.1601368321-1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.501-1.git.0.f8c4746.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.501-1.git.0.f8c4746.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.501-1.git.0.f8c4746.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-docker-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.501-1.git.0.f8c4746.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.501-1.git.0.f8c4746.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.501-1.git.0.f8c4746.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hypershift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.501-1.git.0.f8c4746.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-master","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.501-1.git.0.f8c4746.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.501-1.git.0.f8c4746.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-pod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.501-1.git.0.f8c4746.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-sdn-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.501-1.git.0.f8c4746.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-template-service-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.501-1.git.0.f8c4746.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.501-1.git.0.f8c4746.el7"}]}]}],"products":[{"vendor":"kubernetes","product":"kubernetes"}],"references":[{"url":"https://groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/kubernetes/kubernetes/issues/95622","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web","article","report"]},{"url":"https://security.netapp.com/advisory/ntap-20210122-0006/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8564","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/pull/94712","tags":["web","fix","report"]},{"url":"https://github.com/kubernetes/kubernetes/commit/11793434dac97a49bfed0150b56ac63e5dc34634","tags":["web","fix"]},{"url":"https://pkg.go.dev/vuln/GO-2021-0066","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20210122-0006","tags":["web"]},{"url":"https://github.com/advisories/GHSA-8mjg-8c8g-6h85"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-8564","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4297","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819663","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1853652","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1874268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886637","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4297.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16541","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1106","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2252","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1813","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2020/09/16/3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2254","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2020/09/16/3","tags":["article"]},{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1956","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2255","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2255","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2255","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1961","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8564","tags":["advisory","report"]},{"url":"https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk","tags":["article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14040","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/39491","tags":["article"]},{"url":"https://groups.google.com/forum/#!topic/golang-announce/bXVeAmGOqz0","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14370","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14370","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14370","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15586","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-16845","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-16845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-16845","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/NyPIaucMgXo","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0172","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1917413","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0172.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3193","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1884421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1884422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986413","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3193.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-8564","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-8564","title":"Docker config secrets leaked when file is malformed and loglevel \u003e= 4","description":"In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects \u003c v1.19.3, \u003c v1.18.10, \u003c v1.17.13.","status":"published","published":"2020-12-07T22:00:22.445Z","modified":"2024-09-16T17:32:40.199Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:35:50.88562Z"}],"euvd":[{"id":"EUVD-2023-0668","description":"In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects \u003c v1.19.3, \u003c v1.18.10, \u003c v1.17.13.","status":"published","published":"2020-12-07T22:00:22Z","modified":"2024-09-16T17:32:40Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:55:41.41816Z"}],"ghsa":[{"id":"GHSA-8mjg-8c8g-6h85","title":"Kubernetes Sensitive Information leak via Log File","description":"In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects \u003c v1.19.3, \u003c v1.18.10, \u003c v1.17.13.","status":"published","published":"2023-02-06T23:27:00Z","modified":"2024-05-20T19:26:51Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:37:50.750599Z"}],"nvd":[{"id":"CVE-2020-8564","description":"In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects \u003c v1.19.3, \u003c v1.18.10, \u003c v1.17.13.","status":"published","published":"2020-12-07T22:15:21.307Z","modified":"2026-06-17T03:26:33.61Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:06:27.10541Z"}],"osv":[{"id":"CVE-2020-8564","description":"In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects \u003c v1.19.3, \u003c v1.18.10, \u003c v1.17.13.","status":"published","published":"2020-12-07T22:15:21.307Z","modified":"2026-10-24T10:50:39.790109831Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2020-8564","description":"In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects \u003c v1.19.3, \u003c v1.18.10, \u003c v1.17.13.","status":"published","published":"2020-12-07T22:15:21.307Z","modified":"2026-10-26T12:02:52.074370742Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"GHSA-8mjg-8c8g-6h85","title":"Kubernetes Sensitive Information leak via Log File","description":"In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects \u003c v1.19.3, \u003c v1.18.10, \u003c v1.17.13.","status":"published","published":"2023-02-06T23:27:00Z","modified":"2026-09-10T03:49:56.750201463Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T15:46:42.437513Z"},{"id":"RHSA-2020:4297","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.1 package security update","status":"published","published":"2024-09-30T13:54:04Z","modified":"2026-10-14T10:01:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2021:0172","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.13 packages and security update","status":"published","published":"2024-09-18T02:36:04Z","modified":"2026-10-13T10:02:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:3193","title":"Red Hat Security Advisory: OpenShift Container Platform 3.11.z security and bug fix update","status":"published","published":"2024-09-16T04:56:10Z","modified":"2025-11-22T12:23:43Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"UBUNTU-CVE-2020-8564","description":"In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects \u003c v1.19.3, \u003c v1.18.10, \u003c v1.17.13.","status":"withdrawn","published":"2020-12-07T22:15:00Z","modified":"2025-07-14T06:34:28.449801Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"GO-2021-0066","title":"Sensitive information leak via log file in k8s.io/kubernetes","description":"Attempting to read a malformed .dockercfg may cause secrets to be inappropriately logged.","status":"published","published":"2021-04-14T20:04:52Z","modified":"2026-02-04T03:49:36.175503Z","updated_at":"2026-11-02T15:47:00.604718Z"}]}}