Security Advisory

CVE-2019-10165

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-07-30 22:18:05

Last updated 2024-08-04 22:10:10

Assigner redhat

CVSS score 2.3

State PUBLISHED

Description

OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenShift API server. A user with sufficient privileges could recover OAuth tokens from these audit logs and use them to access other resources.

← Browse all CVEs View on cve.org ↗