CVE-2020-8563

Name of the Vulnerable Software and Affected Versions Kubernetes versions prior to 1.19.3

Description A sensitive information leak occurs via log files in Kubernetes. This issue affects Kubernetes clusters using VSphere as a cloud provider, where the logging level is set to 4 or above, causing VSphere cloud credentials to be leaked in the cloud controller manager's log.

Recommendations For versions prior to 1.19.3, update to version 1.19.3 or later to resolve the issue. As a temporary workaround, consider reducing the logging level to below 4 to minimize the risk of credential leakage. Restrict access to the cloud controller manager's log to prevent unauthorized access to sensitive information.