Database/Container, Kubernetes & orchestration
Kubernetes (client-go): Bearer tokens logged at verbosity 7+
CVSS 6.5CVE-2019-11250Container, Kubernetes & orchestrationcurated
Impact
Bearer tokens logged at verbosity 7+; credential disclosure via logs
Who can reach it
Anyone with log-pipeline read access
What to do
Lower component verbosity; rotate service-account tokens; scrub log store
References
Related entries
- Kubernetes (kube-apiserver): YAML parsing CPU exhaustion in the apiserverCVE-2019-11254 · Kubernetes (kube-apiserver)Medium
- Harbor: Non-admin users create admin accounts via POST /api/usersCVE-2019-16097 · HarborMedium
- Envoy: No URL path normalization, so `something/../admin` bypasses access controlCVE-2019-9901 · EnvoyMedium
- etcd: Gateway TLS authentication applied only to endpoints found in DNS SRV recordsCVE-2020-15136 · etcdMedium
- Docker / moby: Malformed image manifest crashes dockerdCVE-2021-21285 · Docker / mobyMedium
- Kubernetes (kube-apiserver): Node updates bypass a validating admission webhook, defeating node-level policyCVE-2021-25735 · Kubernetes (kube-apiserver)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.