5.3
Moyenne
CVE-2019-10213 OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level…
Description
OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to discover secret material if the log level has already been modified in an operator by a privileged user.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| OpenShift | Versions non publiées |
Autres CVE de OpenShift
Les 7 CVE de OpenShift →
CVE-2019-19355
An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk
7.0
Élevée
CVE-2019-19351
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins
7.0
Élevée
CVE-2019-14845
A vulnerability was found in OpenShift builds, versions 4.1 up to 4.3
5.7
Moyenne
CVE-2019-10165
OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the…
2.3
Faible