-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from multiple functions in rbd_util.go that logged sensitive adminSecret values using klog.V(4).Infof. The commit diff shows these functions previously included the secret in log messages, which was later masked. All identified functions handle Ceph RBD operations and contained explicit logging of credentials at verbosity level 4, matching the vulnerability description.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/kubernetes/kubernetes | go | < 1.17.13 | 1.17.13 |
| github.com/kubernetes/kubernetes | go | >= 1.18.0, < 1.18.10 | 1.18.10 |
| github.com/kubernetes/kubernetes | go | >= 1.19.0, < 1.19.3 | 1.19.3 |