CVE-2020-8564

lowpriority · track · 22EPSS 0.005 · 40 %ileDEEUFRUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.47% (40th) EPSS

CVSS 2.1 · low

Is it mine?

249 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · osv · cert_bund

EPSS · scored 2026-10-27

In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects < v1.19.3, < v1.18.10, < v1.17.13.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedopenshift4/ose-docker-builder@sha256:47f84dd5f0a66d3bd0c38b9efc1d7d61066e7b251c34e322f22f0257e7983297_amd64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5259
Fixedopenshift4/ose-docker-builder@sha256:c646ee7a1af664df8164ddae26b2e3cd9000a33c7ae39a0af8e79884fbcb734a_ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5259
Fixedopenshift4/ose-docker-builder@sha256:f58510bea4e7c8a9b42ef99957293288b59f808f370f91d4baf71375297b70d8_s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5259
Fixedopenshift4/ose-docker-builder@sha256:969a3bd2dd2a0ec101a06d27942f4beb8dbb3bcb9ff5917e3c481ee0acf1de38_s390x as a component of Red Hat OpenShift Container Platform 4.5redhat_csaf
For OpenShift Container Platform 4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.5/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5359
Fixedopenshift4/ose-docker-builder@sha256:bc1411c6b85edc1bc4d7020087914057aea114d2f41366801871b9eb2cff0ff9_amd64 as a component of Red Hat OpenShift Container Platform 4.5redhat_csaf
For OpenShift Container Platform 4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.5/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5359
Fixedopenshift4/ose-docker-builder@sha256:f889c48ab334a3931d2913470f373b04c4722bb526668cc8a558f9120334a8fb_ppc64le as a component of Red Hat OpenShift Container Platform 4.5redhat_csaf
For OpenShift Container Platform 4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.5/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2020:5359
Fixedopenshift4/ose-hyperkube@sha256:16ed20934c51a6762e73cbadc50fc3a2677cc085e4dc8c83dba15ead19427f98_s390x as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2021:0171
Fixedopenshift4/ose-hyperkube@sha256:198141b3dd9da47b8ebd57216da8991f80b1e59949ae9ec343338bfc2cca4954_ppc64le as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2021:0171
Fixedopenshift4/ose-hyperkube@sha256:a8ca7b7e5ceac4c3dc85064d3752bff1920a24371f5fa8cb131a0da4abdf2424_amd64 as a component of Red Hat OpenShift Container Platform 4.6redhat_csaf
For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2021:0171
Fixedopenshift4/ose-docker-builder@sha256:39bf983872a5b07fc6a6358353bd9a7320d2b062b068a43fb0e6d635d1409dfa_amd64 as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
For OpenShift Container Platform 4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2021:0281
Fixedopenshift4/ose-docker-builder@sha256:9182f9e45b4d267386aa90bbcd0832dd271ada5815dfd6f450599132acc3a1a1_s390x as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
For OpenShift Container Platform 4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2021:0281
Fixedopenshift4/ose-docker-builder@sha256:d0f2d46f333947157b885cf4db8cf8d8e444ea7bd85c12d6ca4b06e8d00efede_ppc64le as a component of Red Hat OpenShift Container Platform 4.4redhat_csaf
For OpenShift Container Platform 4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.4/updating/updating-cluster-cli.html.
https://access.redhat.com/errata/RHSA-2021:0281
Fixedatomic-openshift-0:3.11.501-1.git.0.f8c4746.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-0:3.11.501-1.git.0.f8c4746.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-0:3.11.501-1.git.0.f8c4746.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-clients-0:3.11.501-1.git.0.f8c4746.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-clients-0:3.11.501-1.git.0.f8c4746.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-clients-redistributable-0:3.11.501-1.git.0.f8c4746.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-docker-excluder-0:3.11.501-1.git.0.f8c4746.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-excluder-0:3.11.501-1.git.0.f8c4746.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-hyperkube-0:3.11.501-1.git.0.f8c4746.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-hyperkube-0:3.11.501-1.git.0.f8c4746.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-hypershift-0:3.11.501-1.git.0.f8c4746.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-hypershift-0:3.11.501-1.git.0.f8c4746.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-master-0:3.11.501-1.git.0.f8c4746.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-master-0:3.11.501-1.git.0.f8c4746.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-node-0:3.11.501-1.git.0.f8c4746.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-node-0:3.11.501-1.git.0.f8c4746.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-pod-0:3.11.501-1.git.0.f8c4746.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-pod-0:3.11.501-1.git.0.f8c4746.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-sdn-ovs-0:3.11.501-1.git.0.f8c4746.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-sdn-ovs-0:3.11.501-1.git.0.f8c4746.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-template-service-broker-0:3.11.501-1.git.0.f8c4746.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-template-service-broker-0:3.11.501-1.git.0.f8c4746.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-tests-0:3.11.501-1.git.0.f8c4746.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193
Fixedatomic-openshift-tests-0:3.11.501-1.git.0.f8c4746.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
See the following documentation, which will be updated shortly for release 3.11.z, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHSA-2021:3193

cvss

Technical severity, 0–10. One row per scoring source.

5.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.1–5.5

v2.02.1lowAV:L/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 2.9

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 1.8 · impact 3.6

v3.14.7mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU

v3.14.7mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · jordan@liggitt.netexploitability 1 · impact 3.6

v3.14.7mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · OSV

v3.15.1mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.15.3mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · Red Hat Product Security US

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-532USprimaryCWE-117USCWE-532US

affected products (249)

Products and version ranges known to be affected.

IBM DB2all versionscert_bundDEcpe:/a:ibm:db2:-
IBM DB2 On Openshift <11.5.7.0-cn5all versionscert_bundDE
IBM DB2 on Cloud Pak for Data <4.5.0all versionscert_bundDE
IBM MQall versionscert_bundDEcpe:/a:ibm:mq:-
IBM DB2≤ On Openshift <11.5.7.0-cn5cert_bundDE
IBM DB2≤ on Cloud Pak for Data <4.5.0cert_bundDE
Kubernetes Kubernetes≤ < 1.17.13enisa_euvdEU
Kubernetes Kubernetes≤ < 1.19.3enisa_euvdEU
Kubernetes Kubernetes≤ < 1.18.10enisa_euvdEU
kubernetes kubernetes1.17.0 → 1.17.13nvdUScpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
kubernetes kubernetes1.18.0 → 1.18.10nvdUScpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
kubernetes kubernetes1.19.0 → 1.19.3nvdUScpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
Go github.com/kubernetes/kubernetes< 1.17.13osvUSpkg:golang/github.com/kubernetes/kubernetes
Go github.com/kubernetes/kubernetes1.18.0 → 1.18.10osvUSpkg:golang/github.com/kubernetes/kubernetes
Go github.com/kubernetes/kubernetes1.19.0 → 1.19.3osvUSpkg:golang/github.com/kubernetes/kubernetes
Go k8s.io/kubernetes< 1.20.0-alpha.1osvUSpkg:golang/k8s.io/kubernetes
openshift4/ose-aws-machine-controllers@sha256:2c241b33c7697272611331524b068fa2b923b90c35a840b480caef58e009fa93_amd64 as a component of Red Hat OpenShift Container Platform 4.4all versionsnot affectedredhat_csafUS
openshift4/ose-azure-machine-controllers@sha256:c374f9fd39b207c392a98f5a7c6626e4cf68b271dd2a4c74c57a4b6415ceb666_amd64 as a component of Red Hat OpenShift Container Platform 4.4all versionsnot affectedredhat_csafUS
openshift4/ose-baremetal-machine-controllers@sha256:295c574b25a5e3fd8306426ea29f14dfef68c14d454c1a7db66131b662a3a5c6_s390x as a component of Red Hat OpenShift Container Platform 4.4all versionsnot affectedredhat_csafUS
openshift4/ose-baremetal-machine-controllers@sha256:618d045ebdc273c70d4d5aaeebad327971d9bdf344f24c403abb585a3b04889f_ppc64le as a component of Red Hat OpenShift Container Platform 4.4all versionsnot affectedredhat_csafUS

showing 20 of 249

advisories (9)

Vendor and ecosystem advisories describing this.

RHSA-2020:5259Red Hat Security Advisory: OpenShift Container Platform 4.6.8 security and bug fix update2020-12-14csaf · redhat_csafUS
Red Hat OpenShift Container Platform release 4.6.8 is now available with updates to packages and images that fix several bugs. This release includes a security update for openshift-enterprise-builder-container for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2020:5359Red Hat Security Advisory: OpenShift Container Platform 4.5.23 security and bug fix update2020-12-15csaf · redhat_csafUS
Red Hat OpenShift Container Platform release 4.5.23 is now available with updates to packages and images that fix several bugs. This release includes a security update for Kubernetes for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2021:0171Red Hat Security Advisory: OpenShift Container Platform 4.6.13 bug fix and security update2021-01-25csaf · redhat_csafUS
Red Hat OpenShift Container Platform release 4.6.13 is now available with updates to packages and images that fix several bugs. This release also includes a security update for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2021:0281Red Hat Security Advisory: OpenShift Container Platform 4.4.33 bug fix and security update2021-02-03csaf · redhat_csafUS
Red Hat OpenShift Container Platform release 4.4.33 is now available with updates to packages and images that fix several bugs and add enhancements. This release also includes a security update for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2021:3193Red Hat Security Advisory: OpenShift Container Platform 3.11.z security and bug fix update2021-08-25csaf · redhat_csafUS
Red Hat OpenShift Container Platform release 3.11.z is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
WID-SEC-W-2022-0510IBM DB2: Mehrere SchwachstellenDeutsch2022-06-29csaf · cert_bundDE
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.
GHSA-8mjg-8c8g-6h85Kubernetes Sensitive Information leak via Log File2023-02-06ghsa · osvUS
In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects < v1.19.3, < v1.18.10, < v1.17.13.
CERTFR-2026-AVI-1385Multiples vulnérabilités dans les produits VMwareFrançais2026-10-26vendor · certfrFR
GO-2021-0066Sensitive information leak via log file in k8s.io/kubernetes2021-04-14vendor · osvUS
Attempting to read a malformed .dockercfg may cause secrets to be inappropriately logged.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd osv cert_bund nvd redhat_csaf certfr NVD CVE.org MITRE

published 2020-12-07modified 2026-06-17

related (1,489)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2025-24984US	—OT critical	1.99% (81st)	KEV	2025-03-11
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2023-21492US	medium4.4OT critical	2.55% (85th)	KEV	2023-05-04
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
CVE-2023-43261US	high7.5	63.7% (99th)	Exploit	2023-10-04
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.
CVE-2022-47075US	high7.5	59.4% (99th)	Exploit	2023-02-28
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to…
CVE-2020-35234US	high7.5	60.4% (99th)	Exploit	2020-12-14
The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020. If an attacker can list the wp-content/plugins/…

+1484 more

references (24)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan