CVE-2021-3684CWE-532

A vulnerability was found in OpenShift Assisted Installer

published March 24, 2023

CVSS
—
EPSS
0%
Percentile
15.3
In the wild
Unconfirmed
What it is

A vulnerability was found in OpenShift Assisted Installer. During generation of the Discovery ISO, image pull secrets were leaked as plaintext in the installation logs. An authenticated user could exploit this by re-using the image pull secret to pull container images from the registry as the associated user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00249 · 15.3th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2023-03-24T00:00Z
EPSS history
Timeline
  • 24 MAR 00:00Z
    A vulnerability was found in OpenShift Assisted Installer
    cvelistv5