| module: k8s.io/kubernetes |
| package: k8s.io/kubernetes/pkg/credentialprovider |
| versions: |
| - fixed: v1.20.0-alpha.1 |
| description: | |
| Attempting to read a malformed .dockercfg may cause secrets to be |
| inappropriately logged. |
| cves: |
| - CVE-2020-8564 |
| credit: "@sfowl" |
| symbols: |
| - readDockerConfigFileFromBytes |
| - readDockerConfigJSONFileFromBytes |
| links: |
| pr: https://github.com/kubernetes/kubernetes/pull/94712 |
| commit: https://github.com/kubernetes/kubernetes/commit/11793434dac97a49bfed0150b56ac63e5dc34634 |
| context: |
| - https://github.com/kubernetes/kubernetes/issues/95622 |
