Database/Container, Kubernetes & orchestration
Kubernetes (kube-controller-manager): Ceph RBD admin secrets written to controller-manager logs
CVSS 4.7CVE-2020-8566Container, Kubernetes & orchestrationcurated
Impact
Ceph RBD admin secrets written to controller-manager logs
Who can reach it
Anyone with log read access
What to do
Reduce verbosity; rotate Ceph credentials
References
Related entries
- Kubernetes (kube-controller-manager): Half-blind SSRF from the controller manager into the cloud metadata serviceCVE-2020-8555 · Kubernetes (kube-controller-manager)Medium
- Kubernetes (kube-controller-manager): Half-blind SSRF via the Portworx in-tree volume plugin in kube-controller-managerCVE-2025-13281 · Kubernetes (kube-controller-manager)Medium
- Docker / moby: IPv6 not disabled on interfaces where it should beCVE-2024-32473 · Docker / mobyMedium
- KubeVirt: Flawed aggregation-layer authentication flow enables RBAC bypassCVE-2025-64432 · KubeVirtMedium
- Kamaji: unescaped datastore username/schema fields give SQL injection on the shared tenant datastoreCVE-2026-62845 · Kamaji hosted control plane manager (PostgreSQL/MySQL datastore drivers)Medium
- containerd: UID:GID larger than 32-bit signed max wraps to 0, silently running the container as rootCVE-2024-40635 · containerdMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.