VDB
RHSA-2021%3A0171
RHSA-2021%3A0171
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in kubernetes. In Kubernetes, if the logging level is to at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This can occur with client tools like `kubectl`, or other components that use registry credentials in a docker config file.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-csi-external-snapshotter-rhel8@sha256:ea1b1f6e686407a1e64a7b268417a3922349fb1feaa4343867fb288d9dc4b962_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-csi-external-snapshotter-rhel8@sha256:ea1b1f6e686407a1e64a7b268417a3922349fb1feaa4343867fb288d9dc4b962_s390x |
| Red Hat | openshift4/ose-csi-external-attacher@sha256:d2120b4b9b5226fce7c5be533a36f8fff71051d34e5f513333a688a1bba45c75_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-csi-external-attacher@sha256:d2120b4b9b5226fce7c5be533a36f8fff71051d34e5f513333a688a1bba45c75_s390x |
| Red Hat | openshift4/ose-cluster-storage-operator@sha256:50b3df5798200c5dac1e701c93600e64a795f12af77291e534d208d3a8729adb_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-cluster-storage-operator@sha256:50b3df5798200c5dac1e701c93600e64a795f12af77291e534d208d3a8729adb_s390x |
| Red Hat | openshift4/ose-network-metrics-daemon-rhel8@sha256:31f368f9a7394604b23a6afb0f0d66e39a99a830d9e8bd74f2326144b5f3db85_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-network-metrics-daemon-rhel8@sha256:31f368f9a7394604b23a6afb0f0d66e39a99a830d9e8bd74f2326144b5f3db85_s390x |
| Red Hat | openshift4/ose-etcd@sha256:df4273c1a4b850931055b0385b443f38181bc465b254240d80426e3ed0f1a012_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-etcd@sha256:df4273c1a4b850931055b0385b443f38181bc465b254240d80426e3ed0f1a012_ppc64le |
| Red Hat | openshift4/ose-operator-lifecycle-manager@sha256:0da4fab68800d80049400447f630b4dab80d5c5c4e15d6c97eb12e1c6f36bb6f_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-operator-lifecycle-manager@sha256:0da4fab68800d80049400447f630b4dab80d5c5c4e15d6c97eb12e1c6f36bb6f_ppc64le |
| Red Hat | openshift4/ose-tests@sha256:3d5c5f64cfc38578dc37306aa66f35a1b6e5dd91924dace1b6b850f89fe3c14c_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-tests@sha256:3d5c5f64cfc38578dc37306aa66f35a1b6e5dd91924dace1b6b850f89fe3c14c_ppc64le |
| Red Hat | openshift4/ose-coredns@sha256:6f522158ad4c61291e1b8b4531e177a8159d3a36c9e70d9ca3408049183d3737_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-coredns@sha256:6f522158ad4c61291e1b8b4531e177a8159d3a36c9e70d9ca3408049183d3737_amd64 |
| Red Hat | openshift4/ose-csi-node-driver-registrar-rhel8@sha256:e2700834cad1f4094e1efaaf6128ddab421b9636a757bb4119a4f195dd81b584_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-csi-node-driver-registrar-rhel8@sha256:e2700834cad1f4094e1efaaf6128ddab421b9636a757bb4119a4f195dd81b584_ppc64le |
| Red Hat | openshift4/ose-cluster-bootstrap@sha256:9bda798c10089bb9e2f0e276a229aaf065fab913e92e586eb863a7e12491952e_s390x as a component of Red Hat OpenShift Container Platform 4.6 | * |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:d52278233eb7b482d897c37b656cf1ea7bba7fe9fe2f73dab10ecea43f22a469_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-cluster-image-registry-operator@sha256:d52278233eb7b482d897c37b656cf1ea7bba7fe9fe2f73dab10ecea43f22a469_amd64 |
| Red Hat | openshift4/ose-oauth-server-rhel8@sha256:edfb7369129cc8f82c6288d5e2b3976230761f511d9e9a8ec94e19e099e13e42_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-oauth-server-rhel8@sha256:edfb7369129cc8f82c6288d5e2b3976230761f511d9e9a8ec94e19e099e13e42_s390x |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:1ed21cf9261922567f837204e5161679bca395931fb5b085c09c897f50dfcb4e_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-cluster-node-tuning-operator@sha256:1ed21cf9261922567f837204e5161679bca395931fb5b085c09c897f50dfcb4e_amd64 |
| Red Hat | openshift4/ose-docker-builder@sha256:a6c76f64e096c2a40392994af726882430c32d634d991f7d4e12dea3d856ecce_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-docker-builder@sha256:a6c76f64e096c2a40392994af726882430c32d634d991f7d4e12dea3d856ecce_s390x |
| Red Hat | openshift4/ose-csi-external-resizer-rhel8@sha256:8fac45b73e695a759eaea02488db1da1e139262064d5350d661ec0a650071895_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-csi-external-resizer-rhel8@sha256:8fac45b73e695a759eaea02488db1da1e139262064d5350d661ec0a650071895_amd64 |
| Red Hat | openshift4/ose-csi-external-snapshotter-rhel8@sha256:68f4e27d0f66709cf877c4a5ecb5052b3d88f8624ee17fb46a9bc93b4d1ad4e3_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | * |
| Red Hat | openshift4/ose-csi-snapshot-controller@sha256:e6198b863129e8199b8979a6948685674dfe7f5eeb88186302ce35509566c5e4_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-csi-snapshot-controller@sha256:e6198b863129e8199b8979a6948685674dfe7f5eeb88186302ce35509566c5e4_s390x |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:2448e9209966b837a014f81eb0c8f17118f46b7599402a98191ac3cb735bc867_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-cluster-image-registry-operator@sha256:2448e9209966b837a014f81eb0c8f17118f46b7599402a98191ac3cb735bc867_s390x |
| Red Hat | openshift4/ose-prometheus@sha256:0364881822ebaf511f069c70979cafdfb2fdd92ff1a6c284d3aef3a78feeb6f8_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | * |
| Red Hat | openshift4/ose-cluster-monitoring-operator@sha256:7c65c9a259ca154ed50c73187e0cddbccefac19e90ece9ad7d6e8ab5ea7979c6_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | * |
…and 339 more
Timeline
- Jan 25, 2021 CVE Published
- Nov 21, 2025 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2021:0171 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1869634 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1886637 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1890231 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1891742 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1899161 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1903586 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1903991 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1904547 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1912564 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1913316 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1914892 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1915925 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1916166 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1916582 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1916687 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1917014 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0171.json advisory
- https://access.redhat.com/security/cve/CVE-2020-8564 advisory
…and 4 more