{"schema_version":"1.3.1","id":"GO-2021-0065","modified":"2024-07-19T16:04:58Z","published":"2021-04-14T20:04:52Z","aliases":["CVE-2019-11250","GHSA-jmrx-5g74-6v2f"],"summary":"Unauthorized credential disclosure in k8s.io/kubernetes and k8s.io/client-go","details":"Authorization tokens may be inappropriately logged if the verbosity level is set to a debug level.","affected":[{"package":{"name":"k8s.io/client-go","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.17.0"}]}],"ecosystem_specific":{"imports":[{"path":"k8s.io/client-go/transport","symbols":["basicAuthRoundTripper.RoundTrip","bearerAuthRoundTripper.RoundTrip","debuggingRoundTripper.RoundTrip","impersonatingRoundTripper.RoundTrip","userAgentRoundTripper.RoundTrip"]}]}}],"references":[{"type":"FIX","url":"https://github.com/kubernetes/kubernetes/pull/81330"},{"type":"FIX","url":"https://github.com/kubernetes/kubernetes/commit/4441f1d9c3e94d9a3d93b4f184a591cab02a5245"},{"type":"WEB","url":"https://github.com/kubernetes/kubernetes/issues/81114"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2021-0065","review_status":"REVIEWED"}}