Vulnerability Report: GO-2024-2754
- CVE-2020-8566, GHSA-5x96-j797-5qqw
- Affects: k8s.io/kubernetes
- Published: Jun 04, 2024
- Modified: Aug 05, 2025
Sensitive Information leak for users of Ceph RBD via Log File in k8s.io/kubernetes
For detailed information about this vulnerability, visit https://github.com/advisories/GHSA-5x96-j797-5qqw.
Affected Modules
-
PathGo Versions
-
before v1.17.13, from v1.18.0 before v1.18.10, from v1.19.0 before v1.19.3
Aliases
References
- https://github.com/advisories/GHSA-5x96-j797-5qqw
- https://bugzilla.redhat.com/show_bug.cgi?id=1886640
- https://github.com/kubernetes/kubernetes/issues/95624
- https://github.com/kubernetes/kubernetes/pull/95245
- https://github.com/kubernetes/kubernetes/pull/95245/commits/e91ec4fad3366d2dee020919f7c2a0d7b52fd3ea
- https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk
- https://groups.google.com/g/kubernetes-security-discuss/c/vm-HcrFUOCs/m/36utxAM5CwAJ
- https://security.netapp.com/advisory/ntap-20210122-0006
- https://vuln.go.dev/ID/GO-2024-2754.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.