6.5
Moyenne
CVE-2024-9453 A vulnerability was found in Red Hat OpenShift Jenkins
Description
A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially carries a high risk if those logs are centralized when collected. The token is typically valid for one year. This flaw allows a malicious user to jeopardize the environment if they have access to sensitive information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| openshift-sync-plugin | Versions non publiées | |
| OpenShift Developer Tools and Services | Versions non publiées |
Références
- access.redhat.com access.redhat.com
- RHBZ#2316231 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification