-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| k8s.io/client-go | go | < 0.17.0 | 0.17.0 |
| k8s.io/kubernetes | go | < 1.16.0-beta.1 | 1.16.0-beta.1 |
Miggo AIRoot Cause AnalysisThe commit diff shows the vulnerability was addressed by adding a maskValue() function and modifying the RoundTrip method to apply masking when logging headers. The original vulnerable code path in RoundTrip logged Authorization headers in plaintext at high verbosity levels. The debuggingRoundTripper type is specifically designed for verbose logging of request/response details, making its RoundTrip method the clear entry point for header logging. The CWE-532 mapping and vulnerability description directly correlate with this header logging behavior.