Red Hat Security Advisory

RHSA-2019:4082

OpenShift Container Platform 4.1 operator security update

Released 2019-12-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.1 openshift4/ose-cluster-authentication-operator, openshift4/ose-cluster-config-operator, openshift4/ose-cluster-kube-apiserver-operator

Fixes 1 record

TI-2019-07533 CVE-2019-10213 · GHSA-m2h6-jxj8-4jqf

Sensitive information in log files in Red Hat openshift

LOW 31

OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level in a given operator is set to Debug or higher.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00992 Published 2019-11-25 Partial fix CWE-117