Описание
In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects < v1.19.3, < v1.18.10, < v1.17.13.
A flaw was found in kubernetes. In Kubernetes, if the logging level is to at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This can occur with client tools like kubectl, or other components that use registry credentials in a docker config file.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Storage 3 | heketi | Not affected | ||
| Red Hat OpenShift Container Platform 3.11 | atomic-openshift | Fixed | RHSA-2021:3193 | 25.08.2021 |
| Red Hat OpenShift Container Platform 4.4 | openshift4/ose-docker-builder | Fixed | RHSA-2021:0281 | 03.02.2021 |
| Red Hat OpenShift Container Platform 4.5 | openshift4/ose-docker-builder | Fixed | RHSA-2020:5359 | 15.12.2020 |
| Red Hat OpenShift Container Platform 4.6 | openshift-clients | Fixed | RHSA-2020:4297 | 27.10.2020 |
| Red Hat OpenShift Container Platform 4.6 | openshift | Fixed | RHSA-2021:0172 | 25.01.2021 |
| Red Hat OpenShift Container Platform 4.6 | openshift4/ose-docker-builder | Fixed | RHSA-2020:5259 | 14.12.2020 |
| Red Hat OpenShift Container Platform 4.6 | openshift4/ose-hyperkube | Fixed | RHSA-2021:0171 | 25.01.2021 |
Показывать по
Дополнительная информация
Статус:
5.3 Medium
CVSS3
Связанные уязвимости
In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects < v1.19.3, < v1.18.10, < v1.17.13.
In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects < v1.19.3, < v1.18.10, < v1.17.13.
In Kubernetes clusters using a logging level of at least 4, processing ...
Kubernetes Sensitive Information leak via Log File
5.3 Medium
CVSS3