CVE-2020-13597
1 advisory.
Go/github.com/projectcalico/calico CVE-2020-13597: medium 6, EPSS 0.90%
Exposure of Sensitive Information to an Unauthorized Actor and Insertion of Sensitive Information Into Sent Data in Calico
Action: Upgrade github.com/projectcalico/calico to 3.8.9 or later.
go get github.com/projectcalico/calico@v3.14.1go get github.com/projectcalico/calico@v3.13.4go get github.com/projectcalico/calico@v3.12.2go get github.com/projectcalico/calico@v3.11.3go get github.com/projectcalico/calico@v3.10.4go get github.com/projectcalico/calico@v3.9.6go get github.com/projectcalico/calico@v3.8.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.14.0 | 3.14.1 | - |
| 3.13.0 | 3.13.4 | - |
| 3.12.0 | 3.12.2 | - |
| 3.11.0 | 3.11.3 | - |
| 3.10.0 | 3.10.4 | - |
| 3.9.0 | 3.9.6 | - |
| 0 | 3.8.9 | - |
Fixed versions
| 3.14.1 | 3.13.4 | 3.12.2 | 3.11.3 | 3.10.4 | 3.9.6 | 3.8.9 |
Sources
- osv: GHSA-pf59-j7c2-rh6x
- https://nvd.nist.gov/vuln/detail/CVE-2020-13597
- https://github.com/kubernetes/kubernetes/issues/91507
- https://github.com/containernetworking/plugins/pull/484
- https://github.com/containernetworking/plugins/commit/ad10b6fa91aacd720f1f9ab94341a97a82a24965
- https://github.com/projectcalico/calico
- https://groups.google.com/forum/#!topic/kubernetes-security-announce/BMb_6ICCfp8
- https://www.projectcalico.org/security-bulletins
CVE-2020-13597 · published · modified · JSON