Sensitive information in source code In k8s.io/kubernetes
Description
Kubernetes Sensitive Information leak via Log File In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects < v1.19.3, < v1.18.10, < v1.17.13.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 go | 1.17.13, 1.18.10, 1.19.3 | ||
 debian 14 | 1.19.3-1 | ||
debian 13 | 1.19.3-1 | ||
go | 1.20.0-alpha.1 | ||
go | 1.19.3, 1.18.10, 1.17.13 | ||
debian 11 | 1.19.3-1 | ||
debian 12 | 1.19.3-1 |
Aliases
1. 2. 3. 4. 5. 6.
References
1. 2. 3. 4. 5. 6.