CVE-2020-8563: Kubernetes

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects < v1.19.3.

Affected products

• Kubernetes Kubernetes: before 1.19.3 (fixed in 1.19.3)

Published 2020-12-07. Last modified 2026-06-17.