Description
In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects < v1.19.3, < v1.18.10, < v1.17.13.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kubernetes | Kubernetes | < 1.19.3, < 1.18.10, < 1.17.13 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | kubernetes | 1.19.3-1 | — |
| Debian 13 | kubernetes | 1.19.3-1 | — |
| Debian 12 | kubernetes | 1.19.3-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenShift 4 | jenkins-2-plugins | 4.6.1601368321-1.el8 | RHSA-2020:4297 |
| Red Hat OpenShift 4 | openshift +1 | 4.6.0-202101160934.p0.git.94242.fc5242e.el7 | RHSA-2021:0172 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.6.0-202010081244.p0.git.3794.4743d24.el7 | RHSA-2020:4297 |
| Red Hat OpenShift 4 | podman +3 | 1.9.3-3.rhaos4.6.el8 | RHSA-2020:4297 |
| Red Hat OpenShift 4 | runc | 1.0.0-81.rhaos4.6.git5b757d4.el7 | RHSA-2020:4297 |
| Red Hat OpenShift 4 | skopeo +2 | 1:1.1.1-2.rhaos4.6.el8 | RHSA-2021:0172, RHSA-2020:4297 |
| Red Hat OpenShift 3 | atomic-openshift +12 | 3.11.501-1.git.0.f8c4746.el7 | RHSA-2021:3193 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/kubernetes/kubernetes | >= 1.19.0, < 1.19.3 | 1.19.3 | GHSA-8mjg-8c8g-6h85 |
| Go | github.com/kubernetes/kubernetes | >= 1.18.0, < 1.18.10 | 1.18.10 | GHSA-8mjg-8c8g-6h85 |
| Go | github.com/kubernetes/kubernetes | < 1.17.13 | 1.17.13 | GHSA-8mjg-8c8g-6h85 |
| Go | k8s.io/kubernetes | < 1.20.0-alpha.1 | 1.20.0-alpha.1 | GHSA-8mjg-8c8g-6h85 |
Advisories 4
- RHSA-2020:4297 Red Hat Security Advisory: OpenShift Container Platform 4.6.1 package security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2021:0172 Red Hat Security Advisory: OpenShift Container Platform 4.6.13 packages and security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- WID-SEC-2022-0510 IBM DB2: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 18, 2026
- RHSA-2021:3193 Red Hat Security Advisory: OpenShift Container Platform 3.11.z security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025