Database/Container, Kubernetes & orchestration
Kubernetes (cloud-controller-manager): vSphere cloud credentials leaked into logs at verbosity 4+
CVSS 4.7CVE-2020-8563Container, Kubernetes & orchestrationcurated
Impact
vSphere cloud credentials leaked into logs at verbosity 4+
Who can reach it
Anyone with log-pipeline read access
What to do
Reduce log verbosity; rotate cloud credentials; scrub logs
References
Related entries
- Kubernetes: Malformed docker config leaks registry pull secrets into logsCVE-2020-8564 · KubernetesMedium
- Kubernetes: Authorization and bearer tokens written to logs at verbosity 9CVE-2020-8565 · KubernetesMedium
- Kubernetes (kube-controller-manager): Ceph RBD admin secrets written to controller-manager logsCVE-2020-8566 · Kubernetes (kube-controller-manager)Medium
- Docker / moby: IPv6 not disabled on interfaces where it should beCVE-2024-32473 · Docker / mobyMedium
- KubeVirt: Flawed aggregation-layer authentication flow enables RBAC bypassCVE-2025-64432 · KubeVirtMedium
- Kamaji: unescaped datastore username/schema fields give SQL injection on the shared tenant datastoreCVE-2026-62845 · Kamaji hosted control plane manager (PostgreSQL/MySQL datastore drivers)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.