CVE-2020-8566
Fixed in a distro release EPSS <1%CVSS 4.7
In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims. This affects < v1.19.3, < v1.18.10, < v1.17.13.
Products: Kubernetes
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/kubernetes/kubernetes | 1.17.13 |
| Go | github.com/kubernetes/kubernetes | 1.18.10 |
| Go | github.com/kubernetes/kubernetes | 1.19.3 |
| Go | k8s.io/kubernetes | 1.17.13 |
| Go | k8s.io/kubernetes | 1.18.10 |
| Go | k8s.io/kubernetes | 1.19.3 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | kubernetes | 1.19.3-1 |
| Debian 13 | kubernetes | 1.19.3-1 |
| Debian 14 | kubernetes | 1.19.3-1 |
| Red Hat openshift 4.7 | cri-o | 0:1.20.0-0.rhaos4.7.git8921e00.el8.51 |
| Red Hat openshift 4.7 | cri-o | 0:1.20.0-0.rhaos4.7.git8921e00.el7.51 |
| Red Hat openshift 4.7 | cri-o-debuginfo | 0:1.20.0-0.rhaos4.7.git8921e00.el7.51 |
| Red Hat openshift 4.7 | cri-o-debuginfo | 0:1.20.0-0.rhaos4.7.git8921e00.el8.51 |
| Red Hat openshift 4.7 | cri-o-debugsource | 0:1.20.0-0.rhaos4.7.git8921e00.el8.51 |
| Red Hat openshift 4.7 | cri-tools | 0:1.18.0-3.el7 |
| Red Hat openshift 4.7 | cri-tools | 0:1.20.0-1.el8 |
| Red Hat openshift 4.7 | cri-tools-debuginfo | 0:1.20.0-1.el8 |
| Red Hat openshift 4.7 | cri-tools-debuginfo | 0:1.18.0-3.el7 |
| Red Hat openshift 4.7 | cri-tools-debugsource | 0:1.20.0-1.el8 |
| Red Hat openshift 4.7 | ignition | 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 |
| Red Hat openshift 4.7 | ignition-debuginfo | 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 |
| Red Hat openshift 4.7 | ignition-debugsource | 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 |
| Red Hat openshift 4.7 | ignition-validate | 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 |
| Red Hat openshift 4.7 | ignition-validate-debuginfo | 0:2.9.0-2.rhaos4.7.git1d56dc8.el8 |
| Red Hat openshift 4.7 | openshift | 0:4.7.0-202102060108.p0.git.97095.7271b90.el8 |
| Red Hat openshift 4.7 | openshift | 0:4.7.0-202102060108.p0.git.97095.7271b90.el7 |
| Red Hat openshift 4.7 | openshift-hyperkube | 0:4.7.0-202102060108.p0.git.97095.7271b90.el8 |
| Red Hat openshift 4.7 | openshift-hyperkube | 0:4.7.0-202102060108.p0.git.97095.7271b90.el7 |
| Red Hat openshift 4.7 | python-rsa | 0:4.7-1.el8 |
| Red Hat openshift 4.7 | python3-rsa | 0:4.7-1.el8 |
| SUSE Linux Enterprise Module for Containers 15 SP1 | kubernetes | 1.17.13-4.21.2 |
| Ubuntu 22.04 LTS | kubernetes | no fix |
| Ubuntu 24.04 LTS | kubernetes | no fix |
| Ubuntu Pro 20.04 LTS | kubernetes | no fix |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20250807T150727-1.1 |