CVE-2020-8565

—

CVSS 3.1

5.5 medium

EPSS

<1%p42

Published

Dec 7, 2020 (Dec 7, 2020)

Modified

Jun 17, 2026

Description

In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects <= v1.19.3, <= v1.18.10, <= v1.17.13, < v1.20.0-alpha2.

Vendors: kubernetes
Products: kubernetes
Weakness: CWE-532
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.