{"schemaVersion":3,"id":"CVE-2020-8565","aliases":["UBUNTU-CVE-2020-8565","DEBIAN-CVE-2020-8565","CGA-2xc2-cgjf-fj6g","CGA-57jp-f3cf-4f43","CGA-5fhw-c897-cg79","CGA-8pqf-fqx8-xr29","CGA-9h64-6pjr-6xcp","CGA-9hff-www3-mwg5","CGA-c935-rjfc-gm36","CGA-m2hf-2ghg-mm2f","CGA-qjg5-ppj4-rjj4","CGA-rp87-q4mx-7863","CGA-rv25-j5fr-q2j3","CGA-wg6m-jm97-fg27","GHSA-8cfg-vx93-jvxw","GO-2021-0064","CGA-9fvg-5x32-m43h","CGA-j766-c36w-hvmp","CGA-p56p-jrqp-86c6","CGA-r7mj-244h-5fw3"],"status":"published","duplicateOf":null,"title":null,"description":"In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects <= v1.19.3, <= v1.18.10, <= v1.17.13, < v1.20.0-alpha2.","dates":{"published":"2020-12-07T22:00:19.374Z","modified":"2024-09-17T00:05:58.669Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":4.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":4.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":4.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Go","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":2.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":4.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":2.1,"severity":"low","vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00518,"percentile":0.42912,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00518},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00518,"percentile":0.42912}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00518,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00518,"percentile":0.42912}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-532","name":"Insertion of Sensitive Information into Log File","description":"The product writes sensitive information to a log file.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/532.html"}],"affected":[{"vendor":"chainguard","product":"gostatsd","name":"gostatsd","label":"gostatsd","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gostatsd","purlType":"apk","versions":[{"text":"< 28.3.0-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 28.3.0-r33","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-access-management","name":"kubeflow-access-management","label":"kubeflow-access-management","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-access-management","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-access-management-fips","name":"kubeflow-access-management-fips","label":"kubeflow-access-management-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-access-management-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines","name":"kubeflow-pipelines","label":"kubeflow-pipelines","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines","purlType":"apk","versions":[{"text":"< 2.2.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubernetes-secret-generator","name":"kubernetes-secret-generator","label":"kubernetes-secret-generator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubernetes-secret-generator","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"newrelic-nri-statsd","name":"newrelic-nri-statsd","label":"newrelic-nri-statsd","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/newrelic-nri-statsd","purlType":"apk","versions":[{"text":"< 2.14.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.14.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nodetaint","name":"nodetaint","label":"nodetaint","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nodetaint","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-operator","name":"spark-operator","label":"spark-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-operator","purlType":"apk","versions":[{"text":"< 2.1.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.0-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gostatsd","name":"gostatsd","label":"gostatsd","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gostatsd","purlType":"apk","versions":[{"text":"< 28.3.0-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 28.3.0-r33","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-access-management","name":"kubeflow-access-management","label":"kubeflow-access-management","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-access-management","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines","name":"kubeflow-pipelines","label":"kubeflow-pipelines","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines","purlType":"apk","versions":[{"text":"< 2.2.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"newrelic-nri-statsd","name":"newrelic-nri-statsd","label":"newrelic-nri-statsd","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/newrelic-nri-statsd","purlType":"apk","versions":[{"text":"< 2.14.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.14.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nodetaint","name":"nodetaint","label":"nodetaint","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nodetaint","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spark-operator","name":"spark-operator","label":"spark-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spark-operator","purlType":"apk","versions":[{"text":"< 2.1.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.0-r8","eol":null,"hubHref":null},{"vendor":"debian","product":"kubernetes","name":"kubernetes","label":"kubernetes","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/kubernetes","purlType":"deb","versions":[{"text":"< 1.20.0-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.0-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"kubernetes","name":"kubernetes","label":"kubernetes","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/kubernetes","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"k8s.io","product":"client-go","name":"k8s.io/client-go","label":"client-go","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/k8s.io/client-go","purlType":"golang","versions":[{"text":"≥ 0.19.0, < 0.19.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 0.20.0-alpha.0, < 0.20.0-alpha.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 0.18.0, < 0.18.14","noFixRecorded":false,"fixedIn":null},{"text":"< 0.17.16","noFixRecorded":false,"fixedIn":null},{"text":"< 0.20.0-alpha.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 0.19.0, < 0.19.6 | ≥ 0.20.0-alpha.0, < 0.20.0-alpha.2 | ≥ 0.18.0, < 0.18.14 | < 0.17.16 | < 0.20.0-alpha.2","eol":null,"hubHref":null},{"vendor":"k8s.io","product":"kubernetes","name":"k8s.io/kubernetes","label":"kubernetes","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/k8s.io/kubernetes","purlType":"golang","versions":[{"text":"< 1.20.0-alpha.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20.0-alpha.2","eol":null,"hubHref":null},{"vendor":"kubernetes","product":"kubernetes","name":"kubernetes","label":"kubernetes","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.19.3","noFixRecorded":false,"fixedIn":null},{"text":"≤ 1.18.10","noFixRecorded":false,"fixedIn":null},{"text":"≤ 1.17.13","noFixRecorded":false,"fixedIn":null},{"text":"< 1.20.0-alpha2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 1.17.0, ≤ 1.17.13","noFixRecorded":false,"fixedIn":null},{"text":"≥ 1.18.0, ≤ 1.18.10","noFixRecorded":false,"fixedIn":null},{"text":"≥ 1.19.0, ≤ 1.19.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.19.3 | ≤ 1.18.10 | ≤ 1.17.13 | < 1.20.0-alpha2 | ≥ 1.17.0, ≤ 1.17.13 | ≥ 1.18.0, ≤ 1.18.10 | ≥ 1.19.0, ≤ 1.19.3","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"kubernetes","label":"Kubernetes","category":"server-app"}},"hubHref":"/vendor/kubernetes/kubernetes"}],"affectedCount":19,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ","label":"groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ","hostname":"groups.google.com","tags":["Mailing List","X Refsource MLIST","FIX","WEB","Patch","Third Party Advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/95623","label":"github.com/kubernetes/kubernetes/issues/95623","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Third Party Advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-8565","label":"ubuntu.com/security/CVE-2020-8565","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://github.com/kubernetes/kubernetes/pull/95316","label":"github.com/kubernetes/kubernetes/pull/95316","hostname":"github.com","tags":["REPORT","WEB","FIX"]},{"url":"https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk","label":"groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk","hostname":"groups.google.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8565","label":"www.cve.org/CVERecord?id=CVE-2020-8565","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-8565","label":"security-tracker.debian.org/tracker/CVE-2020-8565","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8565","label":"nvd.nist.gov/vuln/detail/CVE-2020-8565","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/kubernetes/client-go/commit/19875a3d5a2e0d4f51c976a9e0662de3c2c011e3","label":"github.com/kubernetes/client-go/commit/19875a3d5a2e0d4f51c976a9e0662de3c2c011e3","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/kubernetes/client-go/commit/1b8383fc150c9b816b0072032cca75754c2734d0","label":"github.com/kubernetes/client-go/commit/1b8383fc150c9b816b0072032cca75754c2734d0","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/kubernetes/client-go/commit/44e1a07f2d513e375c4b6ee6e890040b47befe86","label":"github.com/kubernetes/client-go/commit/44e1a07f2d513e375c4b6ee6e890040b47befe86","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/kubernetes/client-go/commit/e8f871a2e5fadf90fc114565abc0963967f1a373","label":"github.com/kubernetes/client-go/commit/e8f871a2e5fadf90fc114565abc0963967f1a373","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/kubernetes/kubernetes/commit/e99df0e5a75eb6e86123b56d53e9b7ca0fd00419","label":"github.com/kubernetes/kubernetes/commit/e99df0e5a75eb6e86123b56d53e9b7ca0fd00419","hostname":"github.com","tags":["WEB","FIX"]},{"url":"https://github.com/kubernetes/client-go","label":"github.com/kubernetes/client-go","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://pkg.go.dev/vuln/GO-2021-0064","label":"pkg.go.dev/vuln/GO-2021-0064","hostname":"pkg.go.dev","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["RHSA-2021:5085","SUSE-SU-2020:3760-1"],"duplicates":[],"related":["CGA-6H42-QG2H-M7R9","CGA-FMMH-RP4V-X7W7","CGA-QQMW-PGCH-66CR","CGA-R5J8-36P9-Q5PC","SUSE-SU-2020:3760-1"]},"timeline":[{"kind":"published","date":"2020-12-07T22:00:19.374Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-17T00:05:58.669Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":22,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T10:30:50.860Z","stale":false,"partial":false}}