CVE-2021-3528CWE-522

A flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens between the noobaa operator and the noobaa core are leaked into log…

published May 13, 2021

CVSS
—
EPSS
1%
Percentile
58.9
In the wild
Unconfirmed
What it is

A flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens between the noobaa operator and the noobaa core are leaked into log files. An attacker with access to the log files could use this AuthToken to gain additional access into noobaa deployment and can read/modify system configuration.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00887 · 58.9th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2021-05-13T14:30Z
EPSS history
Timeline
  • 13 MAY 14:30Z
    A flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens between the noobaa operator and the noobaa core are leaked into log…
    cvelistv5