Go/k8s.io/kubernetes CVE-2020-8564: medium 4.7, EPSS 0.47%

Kubernetes Sensitive Information leak via Log File

Action: Upgrade k8s.io/kubernetes to 1.20.0-alpha.1 or later.

go get k8s.io/kubernetes@v1.20.0-alpha.1

Affected

Fixed versions

Sources

• osv: GHSA-8mjg-8c8g-6h85#Go/k8s.io/kubernetes
• https://nvd.nist.gov/vuln/detail/CVE-2020-8564
• https://github.com/kubernetes/kubernetes/issues/95622
• https://github.com/kubernetes/kubernetes/pull/94712
• https://github.com/kubernetes/kubernetes/commit/11793434dac97a49bfed0150b56ac63e5dc34634
• https://github.com/kubernetes/kubernetes
• https://groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ
• https://pkg.go.dev/vuln/GO-2021-0066
• https://security.netapp.com/advisory/ntap-20210122-0006

CVE-2020-8564 · published 2023-02-06T23:27:00Z · modified 2026-09-10T03:49:56.750201463Z · JSON