Security Advisories

CGA-f5rg-h936-hh73

Published

Last updated

https://images.chainguard.dev/security/CGA-f5rg-h936-hh73

Package

kubeflow-pipelines

Latest Update

Not affected

Aliases

Severity

4.7

Medium

CVSS V3

Summary

Kubernetes Sensitive Information leak via Log File

Description

In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects < v1.19.3, < v1.18.10, < v1.17.13.

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-f5rg-h936-hh73

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources