2.3
Low
CVE-2019-10165 OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the…
Description
OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenShift API server. A user with sufficient privileges could recover OAuth tokens from these audit logs and use them to access other resources.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenShift | Versions not published |
Other CVEs of OpenShift
The 7 CVEs of OpenShift →
CVE-2019-19355
An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk
7.0
High
CVE-2019-19351
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins
7.0
High
CVE-2019-10213
OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level…
5.3
Medium
CVE-2019-14845
A vulnerability was found in OpenShift builds, versions 4.1 up to 4.3
5.7
Medium