PT-2020-20209 · Kubernetes+1 · Kubernetes+1

Derek0405 + 1 · Published 2020-10-15 · Updated 2025-08-08 · CVE-2020-8563

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kubernetes versions prior to 1.19.3

Description A sensitive information leak occurs via log files in Kubernetes. This issue affects Kubernetes clusters using VSphere as a cloud provider, where the logging level is set to 4 or above, causing VSphere cloud credentials to be leaked in the cloud controller manager's log.

Recommendations For versions prior to 1.19.3, update to version 1.19.3 or later to resolve the issue. As a temporary workaround, consider reducing the logging level to below 4 to minimize the risk of credential leakage. Restrict access to the cloud controller manager's log to prevent unauthorized access to sensitive information.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

ALT-PU-2021-1227

ALT-PU-2021-1495

ALT-PU-2022-1245

CVE-2020-8563

GHSA-5XFG-WV98-264M

GO-2024-2755

OPENSUSE-SU-2025:15424-1

RHSA-2020:5260

Affected Products

Alt Linux

Kubernetes

References · 62

• https://osv.dev/vulnerability/CVE-2020-8563 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8563 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-8563 · Vendor Advisory
• https://groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2025:15424-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5xfg-wv98-264m · Vendor Advisory
• https://osv.dev/vulnerability/GO-2024-2755 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-8563 · Security Note
• https://ubuntu.com/security/CVE-2020-8563 · Vendor Advisory
• https://github.com/kubernetes/kubernetes · Note
• https://github.com/kubernetes/kubernetes/issues/95621 · Note
• https://github.com/kubernetes/kubernetes/pull/95236 · Note
• https://github.com/kubernetes/kubernetes/pull/95236/commits/247f6dd09299bc7893c1e0affea11c0255025b96 · Note
• https://suse.com/security/cve/CVE-2020-8551 · Note
• https://suse.com/security/cve/CVE-2023-2728 · Note