CVE-2020-8563
Fixed in a distro release EPSS <1%CVSS 4.7
In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects < v1.19.3.
Products: Kubernetes
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/kubernetes/kubernetes | 1.19.3 |
| Go | k8s.io/kubernetes | 1.19.3 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 4.6 | openshift | 0:4.6.0-202012051246.p0.git.94231.efc9027.el7 |
| Red Hat openshift 4.6 | openshift | 0:4.6.0-202012051246.p0.git.94231.efc9027.el8 |
| Red Hat openshift 4.6 | openshift-hyperkube | 0:4.6.0-202012051246.p0.git.94231.efc9027.el7 |
| Red Hat openshift 4.6 | openshift-hyperkube | 0:4.6.0-202012051246.p0.git.94231.efc9027.el8 |
| Ubuntu 22.04 LTS | kubernetes | no fix |
| Ubuntu 24.04 LTS | kubernetes | no fix |
| Ubuntu Pro 20.04 LTS | kubernetes | no fix |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20250807T150727-1.1 |