Credential Exposure Affecting github.com/kubernetes/client-go/transport package, versions <0.16.4>=1.7.6 <1.16.0-beta.1>=1.17.0-alpha.0 <1.17.0-alpha.1


Severity

Recommended
0.0
medium
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.17% (56th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-GOLANG-GITHUBCOMKUBERNETESCLIENTGOTRANSPORT-7538823
  • published18 Jul 2024
  • disclosed14 Apr 2021
  • creditUnknown

Introduced: 14 Apr 2021

CVE-2019-11250  (opens in a new tab)
CWE-256  (opens in a new tab)

How to fix?

Upgrade github.com/kubernetes/client-go/transport to version 0.16.4, 1.16.0-beta.1, 1.17.0-alpha.1 or higher.

Overview

Affected versions of this package are vulnerable to Credential Exposure. When the verbosity level is set to debug, authorization tokens are logged.

CVSS Scores

version 3.1