Red Hat Security Advisory

RHSA-2019:4091

OpenShift Container Platform 4.1 library-go security update

Released 2019-12-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.1 openshift4/ose-cluster-kube-controller-manager-operator, openshift4/ose-cluster-kube-scheduler-operator

Fixes 1 record

TI-2019-11058 CVE-2019-14854 · GHSA-rcxj-gjxv-rf5c

Sensitive information in log files in Red Hat library-go

LOW 30

OpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the log level in a given operator is set to Debug or higher.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00799 Published 2020-01-07 Partial fix CWE-117