Sensitive Information leak via Log File in Kubernetes

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-8563 · ADVISORY
• kubernetes/kubernetes · WEB
• kubernetes/kubernetes#95236 · WEB
• kubernetes/kubernetes#95236 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• kubernetes/kubernetes · PACKAGE
• groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk · WEB
• groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ · WEB
• security.netapp.com/advisory/ntap-20210122-0006 · WEB
• security.netapp.com/advisory/ntap-20210122-0006 · Third Party Advisory
• GitHub Advisory GHSA-5xfg-wv98-264m · ADVISORY

github.com/kubernetes/kubernetes のその他の脆弱性

• CVE-2022-3294高 8.8Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modif…
• CVE-2022-3162中 6.5Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the s…
• CVE-2020-8566中 5.5In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to l…
• CVE-2020-8564中 5.5In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the doc…
• CVE-2018-1002105緊急 9.8In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the…